Re: haproxy consuming 100% cpu - epoll loop

On 2017/5/19 00:35, Willy Tarreau wrote: > Hi Patrick, > > On Thu, May 18, 2017 at 05:44:30PM -0400, Patrick Hemmer wrote: >> On 2017/1/17 17:02, Willy Tarreau wrote: >>> Hi Patrick, >>> >>> On Tue, Jan 17, 2017 at 02:33:44AM +, Patrick Hemmer wro

Re: Priority based queuing

On 2018/5/2 22:56, Willy Tarreau wrote: > On Wed, May 02, 2018 at 04:29:33PM -0400, Patrick Hemmer wrote: >> I think you're misunderstanding my design, as scoring wouldn't work like >> this at all. If you give the gold class a score of 1000 (where higher >> number

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/5/11 12:52, Patrick Hemmer wrote: > This adds the set-priority-class and set-priority-offset actions to > http-request and tcp-request content. > The priority values are used when connections are queued to determine > which connections should be served first. The lowest pr

[PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

This adds the set-priority-class and set-priority-offset actions to http-request and tcp-request content. The priority values are used when connections are queued to determine which connections should be served first. The lowest priority class is served first. When multiple requests from the same

[PATCH 0/2] Re: Priority based queuing

On 2018/5/5 13:55, Willy Tarreau wrote: > On Sat, May 05, 2018 at 01:33:51PM -0400, Patrick Hemmer wrote: >>> Also I'm thinking that we can even use 32-bit by putting the frontier >>> between the date and the fixed priority (let's call it class) somewhere >>> else

[PATCH 2/2] tests for queue set-priority

--- Makefile.test| 21 + tests/test-queue.cfg | 8 tests/test_queue.c | 117 +++ 3 files changed, 146 insertions(+) diff --git a/Makefile.test b/Makefile.test new file mode 100644 index 0..41dd03c71 --- /dev/null

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/5/10 01:35, Patrick Hemmer wrote: > This adds the set-priority-class and set-priority-offset actions to > http-request and tcp-request content. > The priority values are used when connections are queued to determine > which connections should be served first. The lowest pr

[PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

This adds the set-priority-class and set-priority-offset actions to http-request and tcp-request content. The priority values are used when connections are queued to determine which connections should be served first. The lowest priority class is served first. When multiple requests from the same

[PATCH 0/2] Re: Priority based queuing

2/52 split and an absolute timestamp. On my system (which is 64-bit) the performance is about 20% faster. The code is much simpler. And it also solves the limitations and issues with wrapping. The patch for this is included in case it's of interest. -Patrick Patrick Hemmer (2): MEDIUM: add set-prio

[PATCH 2/2] use a 64-bit int with absolute timestamp for priority-offset

--- include/types/queue.h | 2 +- src/hlua.c| 5 -- src/queue.c | 144 +++--- 3 files changed, 33 insertions(+), 118 deletions(-) diff --git a/include/types/queue.h b/include/types/queue.h index 03377da69..5f4693942 100644

Re: Priority based queuing

On 2018/5/5 01:29, Willy Tarreau wrote: > On Fri, May 04, 2018 at 06:49:00PM -0400, Patrick Hemmer wrote: >> I'm not quite following the need for multiple queues. Why wouldn't you >> just have one sorted queue, where if multiple pending requests have the >> same priori

Re: [Feature request] Call fan-out to all endpoints.

On 2018/6/10 13:27, Aleksandar Lazic wrote: > Hi. > > On 10/06/2018 17:56, amotz wrote: >> Baptiste wrote: >>> Hi, >>> >>> what's the use case? >>> Is this API gateway kind of thing? >>> >>> Baptiste >> >> From my experience this is mostly needed for operations/management API. >> >> Some

BUG: segfault with lua sample converters & wrong arg types

Haproxy segfaults if you pass the wrong argument type to a converter. Example: haproxy.cfg: global lua-load /tmp/haproxy.lua frontend f1 mode http bind :8000 default_backend b1 http-request lua.foo backend b1 mode http

Re: [PATCH] BUG/MINOR: lua: Segfaults with wrong usage of types.

On 2018/6/15 09:06, Frederic Lecaille wrote: > On 06/15/2018 02:28 PM, Frederic Lecaille wrote: >> On 06/15/2018 02:15 PM, Frederic Lecaille wrote: >>> On 06/14/2018 11:05 PM, Patrick Hemmer wrote: >>>> Haproxy segfaults if you pass the wrong argument typ

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/5/30 04:00, Willy Tarreau wrote: > Hi Patrick, > > I'm finally back on this. > > On Mon, May 14, 2018 at 01:05:03AM -0400, Patrick Hemmer wrote: >> On 2018/5/11 12:52, Patrick Hemmer wrote: >>> This adds the set-priority-class and set-priority-offset actio

haproxy requests hanging since b0bdae7

It seems that commit b0bdae7 has completely broken haproxy for me. When I send a request to haproxy, it just sits there. The backend server receives nothing, and the client waits for a response. Running with debug enabled I see just a single line: :f1.accept(0004)=0005 from

timeout queue broken since f6e6dc1

Just ran across an issue where the `timeout queue` option is non-functional. I can send a request to haproxy which sits in the queue for well past the configured limit. It appears the issue popped up as a result of this commit: commit f6e6dc12cd533b2d8bb6413a4b5f875ddfd3e6e3 (refs/bisect/bad)

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/5/31 00:57, Willy Tarreau wrote: > Hi Patrick, > > On Thu, May 31, 2018 at 12:16:27AM -0400, Patrick Hemmer wrote: >>> I looked at the code to see if something could cause that. I found that the >>> key increment could be a reason (you must restart from the nex

Re: haproxy requests hanging since b0bdae7

On 2018/6/6 08:24, Olivier Houchard wrote: > Hi Willy, > > On Wed, Jun 06, 2018 at 02:09:01PM +0200, Willy Tarreau wrote: >> On Wed, Jun 06, 2018 at 02:04:35PM +0200, Olivier Houchard wrote: >>> When building without threads enabled, instead of just using the global >>> runqueue, just use the

BUG: Tw is negative with lua sleep

When using core.msleep in lua, the %Tw metric is a negative value. For example with the following config: haproxy.cfg: global lua-load /tmp/haproxy.lua frontend f1 mode http bind :8000 default_backend b1 log

BUG: cannot take the address of an rvalue of type 'unsigned long'

Trying to compile current master on OS-X, and get: gcc -Iinclude -Iebtree -Wall -O0 -g -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -fno-strict-overflow -Wno-address-of-packed-member -Wno-null-dereference -Wno-unused-label -DTPROXY -DUSE_ZLIB -DENABLE_POLL

LUA Converters should be global

Right now in LUA, all the HAProxy converters are accessible through the `Converters` class. However this class is only accessible through the TXN class. Can we get this changed so that the Converters class is a global? My intent is to be able to call a builtin HAProxy converter from within a

[PATCH 1/1] DOC/MINOR: clean up LUA documentation re: servers & array/table.

* A few typos * Fix definitions of values which are tables, not arrays. * Consistent US English naming for "server" instead of "serveur". --- doc/lua-api/index.rst | 88 ++- 1 file changed, 45 insertions(+), 43 deletions(-) diff --git

[PATCH 0/1] Re: DOC/MINOR: clean up LUA documentation re: servers & array/table.

Another rebase on this as I found more table/array issues in the documentation. I went through the whole doc this time, so this should be all of it. Patrick Hemmer (1): DOC/MINOR: clean up LUA documentation re: servers & array/table. doc/lua-api/index.rst

Priority based queuing

Would it be possible to add priority based queuing to haproxy? By this I mean that when a server/backend is full (maxconn), that incoming requests would be added to the queue in a custom order. The idea here is that when the system is under stress, to make sure the important requests get handled

Re: Priority based queuing

On 2018/5/2 13:22, Willy Tarreau wrote: > On Wed, May 02, 2018 at 12:44:06PM -0400, Patrick Hemmer wrote: >> Can you elaborate on what you're thinking of for a time-based queue? >> >> What I'm imagining you mean is that you would write a rule to set the >> max qu

Re: Priority based queuing

On 2018/5/2 11:04, Willy Tarreau wrote: > On Tue, May 01, 2018 at 09:34:14PM -0400, Patrick Hemmer wrote: >> Would it be possible to add priority based queuing to haproxy? By this I >> mean that when a server/backend is full (maxconn), that incoming >> requests would

Re: Priority based queuing

On 2018/5/2 16:29, Patrick Hemmer wrote: > > > On 2018/5/2 13:22, Willy Tarreau wrote: >> On Wed, May 02, 2018 at 12:44:06PM -0400, Patrick Hemmer wrote: >>> Can you elaborate on what you're thinking of for a time-based queue? >>> >>> What I'm imagini

[PATCH] MINOR: Add server name & puid to LUA Server class.

--- doc/lua-api/index.rst | 8 src/hlua_fcn.c| 14 ++ 2 files changed, 22 insertions(+) diff --git a/doc/lua-api/index.rst b/doc/lua-api/index.rst index 7a77e46ee..cdb285957 100644 --- a/doc/lua-api/index.rst +++ b/doc/lua-api/index.rst @@ -925,6 +925,14 @@ Server

[PATCH] MINOR: add get_maxconn and set_maxconn to LUA Server class.

--- doc/lua-api/index.rst | 17 + src/hlua_fcn.c| 30 ++ 2 files changed, 47 insertions(+) diff --git a/doc/lua-api/index.rst b/doc/lua-api/index.rst index cdb285957..b61bf6078 100644 --- a/doc/lua-api/index.rst +++ b/doc/lua-api/index.rst @@

[PATCH] DOC/MINOR: clean up LUA documentation re: servers & array/table.

* A few typos * Consistent US English naming for "server" instead of "serveur". * Properly identify tables as tables instead of arrays. And provide information on index. LUA defines an array as a table indexed with integers. By that definition many of the things being called arrays weren't arrays.

[PATCH 1/1] DOC/MINOR: clean up LUA documentation re: servers & array/table.

* A few typos * Move note about duplicate frontend/backend duplicate naming. * Consistent US English naming for "server" instead of "serveur". * Properly identify tables as tables instead of arrays, and provide information on index. -- LUA defines an array as a table indexed with integers. By

[PATCH 0/1] *** SUBJECT HERE ***

guessing this was meant to be placed on `core.proxies`, as there the statement is true. -Patrick Patrick Hemmer (1): DOC/MINOR: clean up LUA documentation re: servers & array/table. doc/lua-api/index.rst | 60 ++- 1 file changed, 31 insert

Re: [PATCH 1/2] MINOR: ssl: disable SSL sample fetches when unsupported

On 2018/4/30 04:58, Emeric Brun wrote: > Hi Patrick, > > On 04/29/2018 01:15 AM, Patrick Hemmer wrote: >> Previously these fetches would return empty results when HAProxy was >> compiled >> without the requisite SSL support. This results in confusion and problem

[PATCH 1/2] MINOR: ssl: disable SSL sample fetches when unsupported

Previously these fetches would return empty results when HAProxy was compiled without the requisite SSL support. This results in confusion and problem reports from people who unexpectedly encounter the behavior. --- src/ssl_sock.c | 27 +++ 1 file changed, 15

[PATCH 0/2] Re: Logging SSL pre-master-key

On 2017/6/30 10:32, Willy Tarreau wrote: > Hi Patrick, > > On Fri, Jun 30, 2017 at 10:28:11AM -0400, Patrick Hemmer wrote: >>> The issue I'm having is that there's no notification >>> that this will not work. Using #ifdef ensures that what is not supported will >>

[PATCH 2/2] MINOR: ssl: add fetch 'ssl_fc_session_key' and 'ssl_bc_session_key'

These fetches return the SSL master key of the front/back connection. This is useful to decrypt traffic encrypted with ephemeral ciphers. --- doc/configuration.txt | 13 + src/ssl_sock.c| 35 +++ 2 files changed, 48 insertions(+) diff --git

Re: [PATCH] MINOR: Add server name & puid to LUA Server class.

did this for consistency, as this is how Proxy.uuid behaves. Even though it could return an integer, it converts it to a string and returns that instead. >> Thanks, >> Willy >> >> On Sun, Apr 29, 2018 at 02:23:48PM -0400, Patrick Hemmer wrote: >>> --- >>> do

[PATCH] DOC: add documentation for prio_class and prio_offset sample fetches.

This adds documentation that was missed as part of 268a707. --- doc/configuration.txt | 11 +++ 1 file changed, 11 insertions(+) diff --git a/doc/configuration.txt b/doc/configuration.txt index 48b69a5bd..d11b63185 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@

Re: haproxy and changing ELB IPs

On 2018/8/7 05:45, Lukas Tribus wrote: > Hello, > > >> We recently had an outage for short time related to NameServer's h/w failure >> (both primary and secondary went down). >> We were told that it is possible for these IPs to change in the future. It >> never happened so far though. > So you

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/11 11:25, Aleksandar Lazic wrote: > Hi Willy. > > > On 11/08/2018 11:04, Willy Tarreau wrote: >> Hi Aleks, >> >> On Sat, Aug 11, 2018 at 10:27:42AM +0200, Aleksandar Lazic wrote: >>> I think it is a requeue mechanism for the connection and not a >>> selector for >>> a server or a

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/13 09:17, Aleksandar Lazic wrote: > On 11/08/2018 14:48, Patrick Hemmer wrote: >> > > [snipp] > >> To answer one of the earlier questions, I do plan on writing a blog >> article yes. The question is when. I'm considering backporting this >> f

haproxy processing request of a disconnected client

So I just noticed the behavior that when a request is queued and the client closes the connection, once a server slot frees up that request is still sent to the server which processes it and sends a response back. What's even more interesting is that the log indicates that everything was processed

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

queue : > - queue_idx = initial position when enqueuing > - queue_idx = measured position when dequeuing Because the stream can pass through multiple queues, we'd have to make sure that every time we de-queue, that the stream code pulls the value and increments itself. However looking at all the vari

[PATCH 2/2] MINOR: Add srv_conn_free sample fetch

This adds the 'srv_conn_free([/])' sample fetch. This fetch provides the number of available connections on the designated server. --- doc/configuration.txt | 21 ++--- src/backend.c | 22 ++ 2 files changed, 40 insertions(+), 3 deletions(-) diff

[PATCH 0/2] sample fetches for available connections

with the priority queuing, so you can see how many connections are available, perhaps for taking action when the number is low. For example by reserving connections for high-priority requests, and rejecting low priority ones. -Patrick Patrick Hemmer (2): MINOR: add be_conn_free sample fetch MINOR: Add

[PATCH 1/2] MINOR: add be_conn_free sample fetch

This adds the sample fetch 'be_conn_free([])'. This sample fetch provides the total number of unused connections across available servers in the specified backend. --- doc/configuration.txt | 15 ++- src/backend.c | 38 ++ 2 files changed,

Re: [PATCH 1/2] MEDIUM: add set-priority-class and set-priority-offset

On 2018/8/10 09:19, Willy Tarreau wrote: > Hi Patrick, > > On Thu, Aug 09, 2018 at 06:29:33PM -0400, Patrick Hemmer wrote: >> I also went and removed the queue position counter code from >> stream_process_counters(), and the logging still appears to work fine >> (but

BUG: LUA txn:get_priv() scoped to connection, not transaction

There is a bug in the current stable haproxy (1.8.13) where the LUA function txn:get_priv() is returning data stored from other transactions. This was discovered as we have code that triggers on certain requests, and it was triggering on requests it should not have been. You can reproduce with

Re: haproxy processing request of a disconnected client

On 2018/8/9 13:00, Patrick Hemmer wrote: > So I just noticed the behavior that when a request is queued and the > client closes the connection, once a server slot frees up that request > is still sent to the server which processes it and sends a response back. > What's even more

Re: [PATCH 0/2] sample fetches for available connections

On 2018/8/9 18:46, Patrick Hemmer wrote: > These are 2 new sample fetches which provide the available connections. > The be_conn_free fetch is similar to connslots, but has significant > difference in that it does not count queue slots, nor backup servers > (unless all serv

Re: [PATCH] MINOR: crypto: Add digest and hmac converters

On 2018/6/17 14:02, Baptiste wrote: > > > Le dim. 17 juin 2018 à 14:10, Patrick Gansterer > a écrit : > > > > On 17 Jun 2018, at 13:36, Baptiste > wrote: > > > > Can they be used to validate oauth tokens too? > > Depends on

Re: connection leak (stuck in CLOSE_WAIT) on master

On 2018/8/9 01:01, Patrick Hemmer wrote: > There's an issue on current master (287527a) where haproxy is losing > track of its connections, and they're getting stuck in CLOSE_WAIT. And > it's counting these connections towards limits (such as maxconn). > Eventually maxcon

Re: BUG: Tw is negative with lua sleep

On 2018/7/18 09:03, Frederic Lecaille wrote: > Hello Patrick, > > On 07/17/2018 03:59 PM, Patrick Hemmer wrote: >> Ping? >> >> -Patrick >> >> On 2018/6/22 15:10, Patrick Hemmer wrote: >>> When using core.msleep in lua, the %Tw metric is a negati

Re: [PATCH 1/2] MINOR: add be_conn_free sample fetch

On 2018/8/22 04:04, Willy Tarreau wrote: > Hi Patrick, > > On Thu, Aug 09, 2018 at 06:46:28PM -0400, Patrick Hemmer wrote: >> This adds the sample fetch 'be_conn_free([])'. This sample fetch >> provides the total number of unused connections across available servers >&g

Re: [PATCH 1/2] MINOR: add be_conn_free sample fetch

On 2018/8/25 01:30, Willy Tarreau wrote: > On Fri, Aug 24, 2018 at 06:18:23PM -0400, Patrick Hemmer wrote: >>> I disagree with making a special case above for maxconn 0. In fact for me >>> it just means that such a server cannot accept connections, so it simply >>>

Re: BUG: LUA txn:get_priv() scoped to connection, not transaction

data = 0 >> end >> data = data + 1 >> print(string.format("set to %d", data)) >> txn:set_priv(data) >> end) > > BR, > Thierry > > >> On 22 Aug 2018, at 05:57, Patrick Hemmer > <mailto:ha

[PATCH] MEDIUM: reset lua transaction between http requests

Not sure if this is the right approach, but this addresses the issue for me. This should be backported to 1.8. -Patrick From 9087400de99a3925380cac4128a431cd48a09145 Mon Sep 17 00:00:00 2001 From: Patrick Hemmer Date: Wed, 22 Aug 2018 10:02:00 -0400 Subject: [PATCH] MEDIUM: reset lua transaction

Re: [PATCH 2/2] MINOR: Add srv_conn_free sample fetch

On 2018/8/22 04:05, Willy Tarreau wrote: > On Thu, Aug 09, 2018 at 06:46:29PM -0400, Patrick Hemmer wrote: >> This adds the 'srv_conn_free([/])' sample fetch. This fetch >> provides the number of available connections on the designated server. > Fine with this as well

Re: BUG: Tw is negative with lua sleep

Ping? -Patrick On 2018/6/22 15:10, Patrick Hemmer wrote: > When using core.msleep in lua, the %Tw metric is a negative value. > > For example with the following config: > haproxy.cfg: > global > lua-load /tmp/haproxy.lua > > frontend f1

lua time tracking

What are the thoughts around putting time tracking stats around LUA calls? Just really basic info like how long a request spent running LUA code. Similar to how we already have metrics for time spent in queue, connecting, waiting on response, etc. Currently I accomplish this manually by grabbing

Re: Does anyone *really* use 51d or WURFL ?

On 2019/1/21 09:36, Willy Tarreau wrote: > Hi all, > > recently it was figured that the buffer API changes caused some breakage > to da.c and 51d.c (both fixed since), I don't know if wurfl builds at all > by the way since the last update to the module is its introduction more > than 2 years

Re: Error parsing commas in str() fetch

On 2019/2/23 18:18, Nick Ramirez wrote: > > If I set a variable like this: > > > /http-request set-var(txn.allowed_methods) str("GET,POST,PUT")/ > > > Then I get an error: > > > /parsing [/etc/haproxy/haproxy.cfg:20] : error detected in frontend > 'fe_proxy' while parsing 'http-request

http/2 server-push support

Now that we have h2 support on frontends, backends, trailers, etc, I'm hoping that server side server-push is somewhere on the roadmap. By "server side" I mean not this middleware based server-push methodology frequently used where a "Link" header is converted to a server push. But instead where

Re: Adding Configuration parts via File

On 2019/3/8 08:17, Philipp Kolmann wrote: > Hi, > > I have ACLs for Source-IPs for Admins for several services. These ACLs > are identical for multiple listener-sections. > > Would it be possible to have a file with several acl snipplets and > source that at the proper section of the config file

Re: Issue with systemd haproxy.service on RHEL 7.4

On 2019/3/7 11:08, Badari Prasad wrote: > Hi > RHEL 7.4 comes with haproxy 1.5.18, I wanted use latest version of > haproxy 1.9.4. So source code comes with haproxy.service.in > > [https://github.com/haproxy/haproxy/blob/master/contrib/systemd/haproxy.service.in]

Compilation fails on OS-X

Trying to compile haproxy on my local machine for testing purposes and am running into the following: # make TARGET=osx src/proto_http.c:293:1: error: argument to 'section' attribute is not valid for this target: mach-o section specifier requires a segment and section separated by

Re: Compilation fails on OS-X

On 2019/2/13 09:40, Aleksandar Lazic wrote: > Am 13.02.2019 um 14:45 schrieb Patrick Hemmer: >> Trying to compile haproxy on my local machine for testing purposes and am >> running into the following: > Which compiler do you use? # gcc -v Configured with: --pr

Re: Compilation fails on OS-X

On 2019/2/13 10:29, Olivier Houchard wrote: > Hi Patrick, > > On Wed, Feb 13, 2019 at 10:01:01AM -0500, Patrick Hemmer wrote: >> >> On 2019/2/13 09:40, Aleksandar Lazic wrote: >>> Am 13.02.2019 um 14:45 schrieb Patrick Hemmer: >>>> Trying to compi

Re: Compilation fails on OS-X

On 2019/2/14 08:20, Frederic Lecaille wrote: > On 2/14/19 1:32 PM, Frederic Lecaille wrote: >> On 2/13/19 7:30 PM, Patrick Hemmer wrote: >>> >>> >>> On 2019/2/13 10:29, Olivier Houchard wrote: >>>> Hi Patrick, >>>> >>

Re: Compilation fails on OS-X

On 2019/2/14 12:45, Olivier Houchard wrote: > Hi Patrick, > > On Thu, Feb 14, 2019 at 09:12:18AM -0500, Patrick Hemmer wrote: >> >> On 2019/2/14 08:20, Frederic Lecaille wrote: >>> On 2/14/19 1:32 PM, Frederic Lecaille wrote: >>>> On 2/13/19 7:30 PM, P

`stats bind-process` broken

With haproxy 1.9.6 the `stats bind-process` directive is not working. Every connection to the socket is going to a random process: Here's a simple reproduction: Config:    global        nbproc 3        stats socket /tmp/haproxy.sock level admin        stats bind-process 1 Testing:    # for i

Re: `stats bind-process` broken

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Thursday, April 11, 2019, 13:23 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org, wlallem...@haproxy.com *Subject:* `stats bind-process` broken On Thu, Apr 11, 2019

Re: Capturing headers from http/2 trailers?

*From:* Aleksandar Lazic [mailto:al-mob...@none.at] *Sent:* Friday, May 24, 2019, 20:30 EDT *To:* Patrick Hemmer *Cc:* Haproxy *Subject:* Capturing headers from http/2 trailers? Hi. Fri May 24 15:00:55 GMT+02:00 2019

Re: Capturing headers from http/2 trailers?

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Saturday, May 25, 2019, 01:42 EDT *To:* Patrick Hemmer *Cc:* Haproxy *Subject:* Capturing headers from http/2 trailers? Hi Patrick, On Fri, May 24, 2019 at 09:00:25AM

Re: http_first_req not working with http2

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Tuesday, June 4, 2019, 10:08 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* http_first_req not working with http2 Hi Patrick, On Mon, Jun 03, 2019

[PATCH] MINOR: SSL: add client/server random sample fetches

This adds 4 sample fetches: - ssl_fc_client_random - ssl_fc_server_random - ssl_bc_client_random - ssl_bc_server_random These fetches retrieve the client or server random value sent during the handshake. Their use is to be able to decrypt traffic sent using ephemeral ciphers. Tools like

[PATCH] MINOR: SSL: add client/server random sample fetches

Re-send of earlier patch due to formatting issues (upgraded thunderbird and lost a bunch of stuff :-( ). As an attachment this time, so should be safe. -Patrick From 0947dc1faf7a0a90631adcebc2e65fc191da8473 Mon Sep 17 00:00:00 2001 From: Patrick Hemmer Date: Tue, 4 Jun 2019 08:13:03 -0400

Re: [PATCH] MINOR: SSL: add client/server random sample fetches

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Tuesday, June 4, 2019, 16:38 EDT *To:* haproxy@formilux.org *Subject:* [PATCH] MINOR: SSL: add client/server random sample fetches Re-send of earlier patch

Lua logging to syslog & not stderr

Is there a way to have Lua log to syslog only, and not to stderr? When I call `TXN.log(...)`, the message shows up in syslog AND stderr. The Lua documentation implies this is possible as it has this statement (http://www.arpalert.org/src/haproxy-lua-api/1.9/index.html): > The log is sent,

unset-var doesn't support conditions

It appears that all usages of unset-var don't support conditions. Meaning none of the following work: http-request unset-var(txn.foo) if { always_true } tcp-request content unset-var(txn.foo) if { always_true } etc. The error presented is: [ALERT] 153/175307 (58641) : parsing

http_first_req not working with http2

As subject says, it appears that the http_first_req sample is not working with http2. Config:   frontend f1     bind :8000     option http-use-htx     log-format http_first_req=%[http_first_req] With `curl http://localhost:8000` Outputs:   <30>Jun  3 17:16:36 haproxy[47767]: http_first_req=1

Re: http_first_req not working with http2

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Monday, June 3, 2019, 17:21 EDT *To:* haproxy@formilux.org *Subject:* http_first_req not working with http2 As subject says, it appears

segfault in tcp-request session set-var

In haproxy 1.9.8, if you do `tcp-request session set-var()` with a variable in any scope other than sess, it segfaults. For example: tcp-request session set-var(txn.foo) ... tcp-request session set-var(req.foo) ... * thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Saturday, May 11, 2019, 06:10 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive Hi Patrick, On Fri, May 10, 2019 at 09:17:25AM

haproxy 1.9.6 segfault in srv_update_status

We haven't had a chance to update to 1.9.8 yet, so we're still running 1.9.6 (Linux) in production, and just had 2 segfaults happen a little over an hour apart. When I look at the core dumps from them, the stack trace is the same. I'm not sure if this is an issue already fixed, so providing

Capturing headers from http/2 trailers?

Is there a way to capture (and log) headers from http/2 response trailers? The documentation doesn't mention trailers, and when I try to reference headers which are present in the trailers (e.g. "res.fhdr(grpc-status)"), it doesn't get captured. At the end of the day I'm trying to log the

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Tuesday, May 7, 2019, 14:46 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive Hi Patrick, On Tue, May 07, 2019 at 02:01:33PM

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Monday, April 29, 2019, 23:55 EDT *To:* William Lallemand *Cc:* Tim Düsterhus , Patrick Hemmer , haproxy@formilux.org *Subject:* [PATCH] MINOR: systemd: Make use

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Tim Düsterhus [mailto:t...@bastelstu.be] *Sent:* Friday, April 26, 2019, 15:03 EDT *To:* Patrick Hemmer , William Lallemand *Cc:* haproxy@formilux.org, w...@1wt.eu *Subject:* [PATCH] MINOR: systemd: Make use

Re: HAProxy 1.9.6 unresponsive

*From:* Willy Tarreau [mailto:w...@1wt.eu] *Sent:* Monday, May 6, 2019, 08:42 EDT *To:* Patrick Hemmer *Cc:* haproxy@formilux.org *Subject:* HAProxy 1.9.6 unresponsive On Sun, May 05, 2019 at 09:40:02AM +0200, Willy

systemd watchdog support?

So with the prevalence of the issues lately where haproxy is going unresponsive and consuming 100% CPU, I wanted to see what thoughts were on implementing systemd watchdog functionality. In our case, haproxy going unresponsive is extremely problematic as our clustering software

Re: [PATCH v2 1/2] MINOR: systemd: Use the variables from /etc/default/haproxy

*From:* Tim Duesterhus [mailto:t...@bastelstu.be] *Sent:* Monday, May 6, 2019, 07:00 EDT *To:* haproxy@formilux.org *Cc:* Apollon Oikonomopoulos , wlallem...@haproxy.com, w...@1wt.eu, ber...@debian.org, Tim Duesterhus

Re: [PATCH] MINOR: systemd: Make use of master socket in systemd unit

*From:* Tim Düsterhus [mailto:t...@bastelstu.be] *Sent:* Friday, April 26, 2019, 14:30 EDT *To:* William Lallemand *Cc:* haproxy@formilux.org, w...@1wt.eu *Subject:* [PATCH] MINOR: systemd: Make use of master socket in

HAProxy 1.9.6 unresponsive

We are running HAProxy 1.9.6 and managed to get into a state where HAProxy was completely unresponsive. It was pegged at 100% like many of the other experiences here on the mailing list lately. But in addition it wouldn't respond to anything. The stats socket wasn't even responsive. When I

haproxy inappropriately sending rst_stream on http/2

I'm running haproxy 1.9.8 and am having an issue where haproxy is sending a http/2 rst_stream message to the client for some reason. When I look in the haproxy logs, the state termination flags are "CD--". However I know the client didn't abort the request as I have a packet capture showing

Re: Case Sensitive Headers

*From:* Luke Seelenbinder [mailto:l...@sermonaudio.com] *Sent:* Wednesday, June 26, 2019, 10:07 EDT *To:* HAProxy *Subject:* Case Sensitive Headers Hello List, I have a painful case of noncompliance to report and

Re: DOC: Suggest to replace the netstat commands

*From:* Alain Belkadi [mailto:xigu...@linuxbeach.be] *Sent:* Monday, July 8, 2019, 10:51 EDT *To:* haproxy@formilux.org *Subject:* DOC: Suggest to replace the netstat commands Hello, As the "netstat" command is

Re: haproxy inappropriately sending rst_stream on http/2

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Wednesday, June 26, 2019, 08:06 EDT *To:* haproxy@formilux.org *Subject:* haproxy inappropriately sending rst_stream on http/2 I'm running haproxy 1.9.8

Re: fullconn not working

*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Friday, June 28, 2019, 11:50 EDT *To:* HAProxy *Subject:* fullconn not working I'm trying to get fullconn working, and can't seem to do so. I dunno if it's

<    1   2   3   >