Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-05 Thread Willy Tarreau
On Tue, Jan 05, 2010 at 11:14:32PM +0100, Cyril Bonté wrote: Hi Willy, Le Mardi 5 Janvier 2010 06:15:54, Willy Tarreau a écrit : The only suspected remaining issue reported by Cyril seems not to be one at first after some tests. I could reproduce the same behaviour but the close_wait

Re: [PATCH 4/5] [MEDIUM] default-server support

2010-01-05 Thread Willy Tarreau
Hi Krzysztof, I've merged all of your patches. However I have a minor concern about something in this one : -The currently supported settings are the following ones. +The currently supported settings are the following ones, the ones marked with +[D] are also upported for default-server.

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-06 Thread Willy Tarreau
Hi Cyril, On Wed, Jan 06, 2010 at 08:58:17PM +0100, Cyril Bonté wrote: Le Mardi 5 Janvier 2010 23:42:46, Willy Tarreau a écrit : On Tue, Jan 05, 2010 at 11:14:32PM +0100, Cyril Bonté wrote: Well, eventually after several different tests, that's OK for me. A short http-request timeout

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-) memory comsuption

2010-01-07 Thread Willy Tarreau
Hi Hank, as I suspected, the problem was with the header capture. They were not released before being erased when clearing the session for a new keep-alive request. I have fixed it in git if you want to try the snapshot again :

Re: listen - unique IP:port

2010-01-07 Thread Willy Tarreau
Hi, On Fri, Jan 08, 2010 at 12:51:46AM +1100, Aristedes Maniatis wrote: I'm working on a web UI for administering the haproxy config and I have a question I can't find the answer to in the documentation. Are the listener blocks unique with respect to IP:port? That is, is this valid:

Re: Headers Size

2010-01-07 Thread Willy Tarreau
Hi, On Thu, Jan 07, 2010 at 04:20:24PM -0500, Hector Danniel Paz Trillo wrote: Hi, I have this configuration haproxy - nginx (static) - apache (php) . It is working fine for large traffic sites. These days I'm adding a new site and I starting to see 502 errors when saving a form with POST

Re: Headers Size

2010-01-07 Thread Willy Tarreau
On Thu, Jan 07, 2010 at 08:40:59PM -0500, Hector Danniel Paz Trillo wrote: Thanks Willy! I recompile haproxy with: -DBUFSIZE=16000 -DMAXREWRITE=1024 -DSYSTEM_MAXCONN=4 It doesn't work. Then I recompile with: -DBUFSIZE=64000 -DMAXREWRITE=1024 -DSYSTEM_MAXCONN=4 And it works.

[ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-07 Thread Willy Tarreau
Hi all, well, some of you have encountered issues with 1.4-dev5 with sessions left in CLOSE_WAIT state or with memory leaks. With the help of Cyril Bonté and Hank A. Paulson who have sent a lot of feedback and tested almost all intermediate versions, we finally managed to nail all the problems

Re: [ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-08 Thread Willy Tarreau
Hi Bart, On Fri, Jan 08, 2010 at 01:00:42PM +0100, Bart van der Schans wrote: Hi, First of all, I really like haproxy and I'm really exited about the keep-alive support! So I gave the new 1.4-dev6 spin, but I'm getting a segfault. When I run haproxy (with -d) in gdb I get: Program

Re: 1.4-dev6 - apache proxying jboss - incomplete page loads

2010-01-08 Thread Willy Tarreau
Hi James, On Fri, Jan 08, 2010 at 03:09:43PM +, James Jenkins wrote: Hi, I have apache servers with mod_proxy sitting in front of jboss servers, with this new code I frequently get only half the page I requested loaded in my browser. It doesn?t happen if I go to the jbosses directly.

Re: cQ session termination

2010-01-08 Thread Willy Tarreau
On Fri, Jan 08, 2010 at 12:13:37PM -0800, Bryan Talbot wrote: I'm trying to understand exactly what this termination state means. I'm seeing http connections from clients that seem to be complete and queued. These requests seem to be timing out from the queue well before the timeout

Re: [ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-08 Thread Willy Tarreau
Hi again Bart, I confirm that I forgot to reinit the session cookie in keep-alive. Could you please apply the attached patch to your sources and try again ? I tried to reproduce the issue but failed to do so, reason why I'm asking for a test. Thanks Willy diff --git a/src/proto_http.c

Re: Headers Size

2010-01-09 Thread Willy Tarreau
On Sat, Jan 09, 2010 at 06:24:46PM +, Hector Danniel Paz Trillo wrote: Thanks for all the suggestions, i'm going to try them. Do you think that this value of BUFSIZE may cause some security or perfomance issues in haproxy? no, in fact it may even improve performance to have larger buffers.

Re: [ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-09 Thread Willy Tarreau
On Sat, Jan 09, 2010 at 11:03:16AM -0800, Hank A. Paulson wrote: I wanted to report after using 1.4-dev6 for several sites for a couple days that the results seem very good. One site was peaking at over 150 Mbps and over 65 million hits past couple of days, during that time memory use

Re: Does anyone have an init.d script for Debian?

2010-01-10 Thread Willy Tarreau
On Sun, Jan 10, 2010 at 02:01:20AM -0800, Craig Carl wrote: All - I installed from source so I could set USE_PCRE=1. It doesn't look like the make process included a startup script for /etc/init.d/. The two included files (init.haproxy, haproxy.init) both look to be for RedHat.

Re: Does anyone have an init.d script for Debian?

2010-01-10 Thread Willy Tarreau
On Sun, Jan 10, 2010 at 11:41:47AM +0100, Holger Just wrote: Hi Craig, (sorry, for double posting, missed the correct button...) On 10.01.10 11:01, Craig Carl wrote: Does anyone know where I can find a /etc/init.d/haproxy script for Debian? The simplest approach would probably be

Re: [ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-10 Thread Willy Tarreau
Hi Bart, On Sun, Jan 10, 2010 at 04:02:18PM +0100, Bart van der Schans wrote: Hi Willy, Thanks for the quick response and the patch. I've applied the patch and it seems to be running fine now and I can't reproduce the segfault. thanks. It has been merged into mainline. Regards, Willy

Re: [ANNOUNCE] haproxy 1.4-dev6 : many fixes

2010-01-10 Thread Willy Tarreau
On Sun, Jan 10, 2010 at 05:01:47PM +0100, Cyril Bonté wrote: Hi again Willy, Le Dimanche 10 Janvier 2010 00:47:14, Willy Tarreau a écrit : Good catch ! Aleks and I have spent some time in the past to track memory leaks in this area. This is a sensible area because it's one where we're

Re: Separate appsession tables per back-end? Or shared?

2010-01-11 Thread Willy Tarreau
Hi John, On Mon, Jan 11, 2010 at 02:50:24PM -0500, John Norman wrote: Hi. What happens if the same cookie is named in two (or more) backends? Is the table in which the cookie value is placed shared among backends, or is there a separate table per backend? There's a separate table per

Re: [PATCH 1/3] [BUG] health checks: fix requeued message

2010-01-11 Thread Willy Tarreau
On Mon, Jan 11, 2010 at 01:30:28PM +0100, Krzysztof Piotr Oledzki wrote: From 12aaba5a79caafb7ebcee3f52a4685a387306e8b Mon Sep 17 00:00:00 2001 From: Krzysztof Piotr Oledzki o...@ans.pl Date: Sun, 10 Jan 2010 21:12:58 +0100 Subject: [BUG] health checks: fix requeued message Dummy copypast

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-12 Thread Willy Tarreau
On Tue, Jan 12, 2010 at 11:56:38AM +0300, Dmitry Sivachenko wrote: Imagine the following scenario: we have large number of requests from different clients. Each client send request rarely, so no need for keep-alive between client and haproxy. OK I see your usage pattern now. I know three

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-12 Thread Willy Tarreau
Hi Ross, first, thanks for bringing your experience here, it's much appreciated. On Tue, Jan 12, 2010 at 10:27:09AM -0500, Ross West wrote: I'll enter in this conversation as I've used (successfully) a load balancer which did server-side keep-alive a while ago. WT Hmmm that's different.

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-12 Thread Willy Tarreau
On Tue, Jan 12, 2010 at 07:01:52PM -0500, Ross West wrote: WT It's not only a matter of caching the request to replay it, it is that WT you're simply not allowed to. I know a guy who ordered a book at a WT large well-known site. His order was processed twice. Maybe there is WT something on

Re: [ANNOUNCE] haproxy 1.4-dev5 with keep-alive :-)

2010-01-13 Thread Willy Tarreau
Hi Ross, On Wed, Jan 13, 2010 at 12:12:04PM -0500, Ross West wrote: I can see a small confusion here because I've used the wrong terminology. Proxy is not the correct term, as there are actual proxy devices out there (eg: Squid) which are generally visible to the client/server and shouldn't

Re: Config error -

2010-01-13 Thread Willy Tarreau
On Wed, Jan 13, 2010 at 08:47:00PM -0800, Craig Carl wrote: That cleared up the error, thanks Ryan. FYI I took that config straight out of the documentation - http://haproxy.1wt.eu/download/1.3/doc/architecture.txt thanks for pointing it and sorry for this. I remember having fixed them in

Re: QUEUEs and roundrobin balance

2010-01-13 Thread Willy Tarreau
Hello, On Wed, Jan 13, 2010 at 07:12:45PM -0800, Jose Avila(Tachu) wrote: I have a theory on a recent issue i've been experiencing for the last 2 days that i would like some clarification on. I have a load balancer with 30 backend servers with a roundrobin balance line and a maxconn per

Re: tcplog SC status

2010-01-13 Thread Willy Tarreau
On Wed, Jan 13, 2010 at 01:33:58PM -0800, Paul Hirose wrote: I stumbled across a few SC results in my logs, which the docs say is: SC The server or an equipement between it and haproxy explicitly refused the TCP connection (the proxy received a TCP RST or an ICMP message

Re: mysql-check and distant servers

2010-01-14 Thread Willy Tarreau
Hi Cyril, thanks for your tests. I'll leave it up to you and Hervé to improve on existing code, since I really have no added value here (I don't even have one mysql at hand). Concerning possible choices, I agree that we must do our best not to perturbate the service. Most of the time when people

Re: ACL size limit

2010-01-15 Thread Willy Tarreau
Hi Chris, On Fri, Jan 15, 2010 at 10:20:29AM +, Chris Sarginson wrote: Hi guys, Is there a limit on the amount of infomation you can put as part of an acl? I want to do the following: acl ip_ssl_block_72 hdr_reg(X-Real-IP) 10.10.10.10 use hdr_ip() and not hdr_reg. It returns

Re: ACL size limit

2010-01-15 Thread Willy Tarreau
On Fri, Jan 15, 2010 at 10:52:45AM +, Chris Sarginson wrote: Sorry to reply to my own email - but as an extension of this would it be feasible to have a hdr_src option for use in in the same manner as using the src option that supports matching if an IP is in a range (only with hdr_src

Re: cD status in tcplog

2010-01-15 Thread Willy Tarreau
Hi Paul, On Thu, Jan 14, 2010 at 03:21:13PM -0800, Paul Hirose wrote: A simple question - is the data received from the back-end server stored on haproxy until all the data is received, before that date is then sent on to the client? I didn't think so, but I wasn't sure now. no it's not.

Re: [PATCH] mysql-check

2010-01-16 Thread Willy Tarreau
Hi Hervé, On Sat, Jan 16, 2010 at 11:34:38PM +0100, Herve COMMOWICK wrote: Hi Cyril, You forgot the log-error option that much sysadmin use for correct debugging without pollution, but i don't think it logs incorrect logging (if i remember well). The Authentication packet is mandatory

Re: [PATCH] mysql-check

2010-01-17 Thread Willy Tarreau
Hi, On Sun, Jan 17, 2010 at 06:36:06PM +0100, Cyril Bonté wrote: (...) Hervé's patch is near the lightest check haproxy can do, the haproxy user can be provided in the authentication request (or not) and I'd prefer the response to be ignored as it can have side effect on the backend server

Re: Syslog losing packets on local machine

2010-01-23 Thread Willy Tarreau
Hi Alexander, On Wed, Jan 20, 2010 at 02:08:18PM +0100, Alexander Staubo wrote: This is only tangentially related to HAProxy, but our sysadmins are coming up short, so I'm hoping someone on this list will be able to help. We are experiencing a lot of missing log entries when running

Re: act/fe/be/srv-conn explanation

2010-01-23 Thread Willy Tarreau
Hi Paul, On Wed, Jan 20, 2010 at 02:51:23PM -0800, Paul Hirose wrote: (...) Sample entry from my logs: Jan 20 14:33:49 lbtest1 haproxy[25582]: :34456 [20/Jan/2010:14:33:47.826] LDAPFarm LDAPFarm/dp2 0/0/1227 202 -- 29/29/29/13/0 0/0 (...) Is actconn across all pools (eg: all listen

Re: Does haproxy support listen on unix domain socket?

2010-01-23 Thread Willy Tarreau
Hi, On Thu, Jan 21, 2010 at 05:01:24PM +0800, Delta Yeh wrote: Hi, I use nginx + haproxy , in one box , to load balance 4 web server. The load is about 5000 request/second for haproxy. Sometimes there is tcp port is not available error. This is not normal. This probably means that your

Re: Help! haproxy+nginx+tomcats cluster problems.

2010-01-23 Thread Willy Tarreau
Hi, On Sat, Jan 23, 2010 at 12:05:16PM +0800, ËïéªËÉ wrote: Hello ! I have questions ! please help me ! thank you very much ! my cluster works , but not excellent. that's please see this architecture below my questions first. Q1:on the tomcats ,there are always 500~800 TIME_WAIT connections

Re: freebsd accept filter

2010-01-23 Thread Willy Tarreau
On Sat, Jan 23, 2010 at 04:59:05PM +0100, Andrew Azarov wrote: Is there any possibility to add freebsd accept filter? recently a sin flood made our haproxy die of high amount of ram being used... If it was a SYN flood, it would not change anything, because haproxy does not get notified until

Re: Syslog losing packets on local machine

2010-01-24 Thread Willy Tarreau
On Sun, Jan 24, 2010 at 11:37:12PM +0100, Alexander Staubo wrote: On Sat, Jan 23, 2010 at 12:59 PM, Willy Tarreau w...@1wt.eu wrote: it may happen depending on the load, your syslog daemon and its config. The syslog daemon from the sysklogd package is generally OK up to 1000 logs per second

[ANNOUNCE] haproxy 1.4-dev7

2010-01-24 Thread Willy Tarreau
Hi, haproxy 1.4-dev7 is now available. As always, I would have liked to issue it earlier but when working on the end-to-end keepalive, I discovered several issues in the client-side keep-alive code that needed to be fixed, the last one dating one hour ago. So finally no end-to-end keep-alive in

Re: [PATCH] Keep in sync defaults support between documentation and code

2010-01-25 Thread Willy Tarreau
Hi Cyril, this was a nice cleanup, I've merged it. Thanks! Willy

[ANNOUNCE] haproxy 1.4-dev8 : important bugfix

2010-01-25 Thread Willy Tarreau
Hi all, Krzysztof Oledzki managed to make dev7 reliably crash. After investigation, it appeared that one of the latest keep-alive bugs I had fixed was not complete as the same code was present in another function. In practice, 1.4-dev5, -dev6 and -dev7 are affected by the same bug and may

Re: rate limit by virtual host

2010-01-26 Thread Willy Tarreau
Hello Fabien, On Tue, Jan 26, 2010 at 12:12:25AM +0100, Fabien Germain wrote: Hello, I have a web hosting cluster, and I would like to rate limit by vhost (i.e. no more than 50 connections per second on www.domain1.com, for example). I found a way to do so, and I'd like to get your feeling

Re: Finding econn on stats, how to match to logs?

2010-01-26 Thread Willy Tarreau
On Tue, Jan 26, 2010 at 09:38:29AM -0800, Paul Hirose wrote: My stats page (thank you, got that working) shows I have 20 conn errors. The three backend servers all show 0 in all the boxes, but the backend row shows blank 20 and 0 in the three Error columns (Req, Conn, Resp.) I looked

Re: [ANNOUNCE] haproxy 1.4-dev7

2010-01-26 Thread Willy Tarreau
Hi Cyril, On Tue, Jan 26, 2010 at 10:25:06PM +0100, Cyril Bonté wrote: Hi Willy, Le Lundi 25 Janvier 2010 02:29:24, Willy Tarreau a écrit : (...) - the stickiness code was merged. Sorry today I don't have time to work on a patch, but I hope the feedback will help you. I've made

Re: Keepalives and Errors

2010-01-27 Thread Willy Tarreau
On Wed, Jan 27, 2010 at 01:51:30PM -0500, Zachary Goldberg wrote: On Tue, Jan 26, 2010 at 2:02 PM, Willy Tarreau w...@1wt.eu wrote: Hello, I suspect that in fact you're diverting the 503 to use an errorfile directive to return some specific data. This won't be needed anymore once we

Re: Failover to side B without switch back to side A when it's reachable again.

2010-01-27 Thread Willy Tarreau
Hi, On Wed, Jan 27, 2010 at 04:15:30PM +0100, Franco Imboden wrote: Hi, I have a question concerning a failover scenario of a webservice where no cookies are supported. as long as nothing happens, all requests should be routed to side A. If side A is not reachable anymore,

[ANNOUNCE] haproxy stable 1.3.23

2010-01-28 Thread Willy Tarreau
Hi ! after 3.5 months of minor updates and bugfixes, here comes haproxy 1.3.23. It fixes a few minor to medium issues : - several annoying config parser issues causing incorrect or imprecise error detection/reporting, as well as one bug when dealing with long lines. - a weakness in the

Re: Broken link HAproxy1.3 in Solaris

2010-01-29 Thread Willy Tarreau
On Fri, Jan 29, 2010 at 10:34:30AM -0800, Craig Carl wrote: I totally missed the *.23. Sorry about my confusion. well, I have still not built it (as I didn't build the .22 either), but I updated the links just in case. I'll have to replug my sun hoping it still works. Willy

Re: high connection rates

2010-01-30 Thread Willy Tarreau
Hi David, On Fri, Jan 29, 2010 at 03:58:09PM -0800, David Birdsong wrote: I'm curious what others are doing to achieve high connection rates -say 10Kconnections/ second. We're serving objects averaging around 100KB, so 10K/sec is a fully utilized 1G ethernet card. No, at 10k/sec you're at

Re: [PATCH] add a maintenance mode to servers

2010-01-31 Thread Willy Tarreau
Hi Cyril, On Sun, Jan 31, 2010 at 07:54:55PM +0100, Cyril Bonté wrote: Hi willy, this is a first attempt to add a maintenance mode on servers, using the stat socket (in admin level). It can be done with the following command : set maintenance backend/server on (or off to leave the

Re: high connection rates

2010-01-31 Thread Willy Tarreau
Hi David, On Sun, Jan 31, 2010 at 11:41:20AM -0800, David Birdsong wrote: we serve media. i double checked the average size simply by reading content length values and averaging them for every 100 and 1000 requests over a 5 minute period. yep, 85-95kB is what we serve mostlyall images.

Re: [PATCH] add a maintenance mode to servers

2010-01-31 Thread Willy Tarreau
On Sun, Jan 31, 2010 at 10:34:03PM +0100, Cyril Bonté wrote: OK, I didn't see it like this. I thought it was better to have the same behaviour as if those servers were not checked at all, and that users have the possibility to disable the tracking servers by hand. In fact not because the

Re: high connection rates

2010-01-31 Thread Willy Tarreau
On Mon, Feb 01, 2010 at 01:42:53AM +0100, XANi wrote: Hi it's statically in the kernel, i haven't gottten around to recompiling the kernel yet to compile it out. i am using the NOTRACK module to bypass all traffic around conntrack though. What a shame :-( Unless I'm

Re: BADREQ

2010-02-02 Thread Willy Tarreau
Hello, On Tue, Feb 02, 2010 at 01:40:47PM +0100, Peter Griffin wrote: Hi, am getting these results in haproxy logs: Feb 2 13:17:40 localhost haproxy[3245]: 10.10.10.62:54164[02/Feb/2010:13:17:40.774] load_balanced load_balanced/www1 -1/1/1/-1/4 0 715 - - 0/0/0/0/0 0/0 BADREQ I

Re: [PATCH] add a maintenance mode to servers

2010-02-02 Thread Willy Tarreau
Hi Cyril, On Tue, Feb 02, 2010 at 11:00:47PM +0100, Cyril Bonté wrote: Hi again, Le Mardi 2 Février 2010 21:07:04, Cyril Bonté a écrit : OK, you'll find a small update (smaller than I firstly thought) in attachment. please forget the previous one and find this new one that correctly

Re: Manipulate packet payload

2010-02-02 Thread Willy Tarreau
On Tue, Feb 02, 2010 at 05:40:13PM +0100, Holger Just wrote: Hi On 2010-02-02 16:19, Anthony D wrote: I understand that HAproxy can do L7 header manipulation, however I read in the manual that it doesn't touch the data contents. Are there any plans for adding this option? I can not

Re: Apache CLOSING state

2010-02-02 Thread Willy Tarreau
On Mon, Feb 01, 2010 at 04:26:24PM +, Alex Forrow wrote: Just to provide an update to this issue, the problem was caused by mis-configured conntrack. Temporary removal of this module solved the issue. thanks for the update Alex, that's much appreciated ! Willy

[ANNOUNCE] haproxy 1.4-rc1

2010-02-02 Thread Willy Tarreau
Hi, OK now things have stabilized a lot, not yet in terms of code, but at least in terms of usability. There were no bug affecting the state machine nor data integrity since last release, which hopefully means that we're now safe again. This one is called 1.4-rc1, which indicates that we should

Re: [PATCH] add a maintenance mode to servers

2010-02-02 Thread Willy Tarreau
On Tue, Feb 02, 2010 at 11:52:36PM +0100, Cyril Bonté wrote: Hi Willy, Le Mardi 2 Février 2010 23:39:22, Willy Tarreau a écrit : at first I was hesitating because those DOWN/MAINT can become quite confusing, but after some thinking, the current situation is already confusing. So I

Re: [PATCH] add a maintenance mode to servers

2010-02-02 Thread Willy Tarreau
On Wed, Feb 03, 2010 at 12:26:28AM +0100, Cyril Bonté wrote: Le Mardi 2 Février 2010 23:52:36, Cyril Bonté a écrit : Le Mardi 2 Février 2010 23:39:22, Willy Tarreau a écrit : (...) In my opinion the real state is MAINT, and we may complete it with some info indicating

Re: Fwd: Site running slow

2010-02-06 Thread Willy Tarreau
Hi Peter, it's needless to resend your mail 3 times. Most people on this list aren't always available, but are generally helpful. Sometimes you just have to be a bit patient. I see no timeout in your stunnel configuration : My stunnel.conf: #setuid=stunnel #setgid=proxy debug = 3 output

Re: Still can't get acl working properly -

2010-02-06 Thread Willy Tarreau
On Fri, Feb 05, 2010 at 07:43:05PM -0800, Craig Carl wrote: I've been beating my head against this for a week, I'm stuck. I am trying to do a really, really simple acl. listen webservers 9.4.184.166:80 acl yahoo url_dom -i yahoo redirect prefix https://yahoo.com if yahoo Won't

Re: Log level error/warning

2010-02-06 Thread Willy Tarreau
Hello Serge, this list is english-speaking, but please see my responses below. On Thu, Feb 04, 2010 at 02:52:11PM +0100, Reynier Serge wrote: Bonjour, j'ai mis un haproxy en place pour des connexions MySQL et j'aimerai loguer seulement les erreurs et warning de haproxy visible sur la page

Re: Fwd: Site running slow

2010-02-06 Thread Willy Tarreau
On Sat, Feb 06, 2010 at 09:51:45AM +0100, Peter Griffin wrote: Hi Will, I didn't see my post in the archives and since this is a production site I panicked. Thank you so much for your explanation, it's much clearer now. I will make the changes and report back how it went. Do you think

Re: haproxy tuning for apache

2010-02-06 Thread Willy Tarreau
Hi Gabriel, On Wed, Feb 03, 2010 at 09:39:06PM -0200, Gabriel Sosa wrote: guys, we have customized the 503 and added google analytcs on it to know how many errors we get. So far we are seeing few errors and I would like to know if this is because backed servers are full or what. Also I

Re: Public IP addresses

2010-02-06 Thread Willy Tarreau
On Thu, Feb 04, 2010 at 04:25:26PM +, william pink wrote: Hi, I have three Xen instances with public IP addresses and I want to install Haproxy and balance between the two backends, I have done alots of searching but I can't seem to pin point the issue. Here is the issue when I start it

Re: URL rewrite question

2010-02-06 Thread Willy Tarreau
Hi, On Thu, Feb 04, 2010 at 10:31:03PM +0100, Holger Just wrote: On 2010-02-04 21:15, Sriram Chavali wrote: I am trying to rewrite URLs using haproxy's reqirep directive. The url that I am trying to rewrite is of the pattern /action/register?param1=fooparam2=barparam3=baz The URL

Re: Fwd: Site running slow

2010-02-06 Thread Willy Tarreau
On Sat, Feb 06, 2010 at 12:27:10PM +0100, Peter Griffin wrote: The minute I put the changes and made the loadbalancer active, external users experienced serious downtime. I tried accessing our site from an external source and sure enough we were unbrowsable. So I had to take haproxy off

Re: Fwd: Site running slow

2010-02-06 Thread Willy Tarreau
On Sat, Feb 06, 2010 at 01:16:00PM +0100, Peter Griffin wrote: Both http https. Also both web servers started to take it in turns to report as DOWN but more frequently the second one than the first. I ran ethtool eth0 and can verify that it's full-duplex 1Gbps: OK. I'm attaching dmesg, I

Re: sparc-solaris 10 -haproxy-problem with log and syslog

2010-02-09 Thread Willy Tarreau
Hello Gustavo, On Tue, Feb 09, 2010 at 10:56:45AM -0500, gustavo.jimenez wrote: Hello i have installed haproxy in a machine t2000 solaris10-sparc, it's work in tcp mode and as a load balancer of a transactional switchs, it's has a good performance but my problem is that i can see a log

Re: DEBUG_FULL and other DEBUG_*

2010-02-09 Thread Willy Tarreau
On Mon, Feb 08, 2010 at 12:35:32PM -0800, Paul Hirose wrote: The error earlier reported during -dev7 about not compiling with DEBUG_FULL is still present in rc1 and ss-20100208. As that msg indicated, changing it f rom req to rep allowed the compile. grrr, it seems I lost the patch. Care to

Re: HAPROXY between mysql client and server to eliminate network latency problems

2010-02-09 Thread Willy Tarreau
On Tue, Feb 09, 2010 at 07:37:03PM +0100, Berco Beute wrote: I want to use HAPROXY between a slow mysql clients and a mysql server to minimize database interaction time. The large network latency between the client and database is currently a performance bottleneck. The database is often

Re: haproxy for multiple backend requests for single resource

2010-02-09 Thread Willy Tarreau
Hi, On Tue, Feb 09, 2010 at 09:09:31PM -0700, Neal Richter wrote: Hi all, We've been happily using haproxy as a load balancer between a pool of apache boxes and a pool or tomcat boxes for 3 years in AWS. Amazing piece of software that gives us zero issues. Question. Has anyone

Re: haproxy for multiple backend requests for single resource

2010-02-09 Thread Willy Tarreau
On Tue, Feb 09, 2010 at 10:07:14PM -0700, Neal Richter wrote: I realize its a non-load balacer use and agree with the inherent issue you point-out. Yet there are few pieces of software as capable at handling concurrent connections to disparate destinations with low overhead as haproxy.

Re: make logging even better

2010-02-10 Thread Willy Tarreau
On Wed, Feb 10, 2010 at 08:11:27AM -0600, Nicholas Hadaway wrote: Hello, (7:40:39 AM) raker: so... last weekend I upgraded to HAProxy 1.4_rc1... (7:40:56 AM) raker: and I enabled logging... (7:41:52 AM) raker: and I managed to write a LogFormat in analog that parses it! (7:42:07 AM)

Re: Truncated health check response from real servers

2010-02-10 Thread Willy Tarreau
On Wed, Feb 10, 2010 at 10:56:14PM +, Nick Chalk wrote: Thanks Willy, Krzysztof. 2010/2/10 Willy Tarreau w...@1wt.eu: Did you managed to fix the several remaining issues which could cause it to crash the process ? I believe so, following Cyril Bonté's suggestions last week. I'm

Re: make logging even better

2010-02-10 Thread Willy Tarreau
On Wed, Feb 10, 2010 at 11:06:19PM -0600, Nicholas Hadaway wrote: Thanks Willy! I think in this format I will be able to get less corrupted lines when parsing... but it didn't simplify things really... Because of the syslog framing and extra timing fields, I still need to write a custom

Re: Truncated health check response from real servers

2010-02-13 Thread Willy Tarreau
On Fri, Feb 12, 2010 at 05:47:41PM +0100, Krzysztof Ol??dzki wrote: There are several issues with the fix: - we need to check if connection is not closed, as it is pointless to use MSG_PEEK and restarting such check if there is no more data we are able to read Indeed, with MSG_PEEK we

Re: increasing TCP throughput

2010-02-25 Thread Willy Tarreau
Hi, On Wed, Feb 24, 2010 at 05:08:24PM -0800, AJ Asver wrote: Hi all, I'm using HAProxy combined with beanstalkd to create redundant queueing system. Everything is working except that I've noticed that I can queue far more messages when I push them directly to beanstalkd rather than

Re: Being sticky to a host, but not to a port

2010-02-25 Thread Willy Tarreau
Hi Martin, On Thu, Feb 25, 2010 at 11:53:16AM +0800, Martin Aspeli wrote: Hi, We're contemplating a design where we'll have two servers, A and B. On each, we'll have 8 instances of our application running, on ports 8081-8088. This is mainly to effectively use multiple cores. The

Re: Truncated health check response from real servers

2010-02-25 Thread Willy Tarreau
Hi Nick, On Mon, Feb 15, 2010 at 10:05:57AM +, Nick Chalk wrote: Hello Willy, Krzysztof. On 13 February 2010 10:40, Willy Tarreau w...@1wt.eu wrote: On Fri, Feb 12, 2010 at 05:47:41PM +0100, Krzysztof Ol??dzki wrote: There are several issues with the fix:  - we need to check

Re: killing persisent conections on backends marked down?

2010-02-25 Thread Willy Tarreau
Hi, On Thu, Feb 25, 2010 at 10:54:35PM +0100, XANi wrote: Dnia 2010-02-25, czw o godzinie 16:27 -0500, Greg Gard pisze: hi willy and friends, i am working on a set of ruby scripts to do database failover and stonith. so far all is working pretty well, but i have a few issues: 1)

Re: [ANNOUNCE] haproxy-1.4.0

2010-02-26 Thread Willy Tarreau
Hi Jeff, On Fri, Feb 26, 2010 at 10:38:55AM -0500, Jeff Buchbinder wrote: Willy Tarreau wrote: I'm obviously interested in any problem report :-) Build on OpenBSD 4.3 seems to fail unless #include common/compat.h is commented out of the src/lb_*.c files. This seemed to be the case

Re: [ANNOUNCE] haproxy-1.4.0

2010-02-26 Thread Willy Tarreau
On Fri, Feb 26, 2010 at 10:45:58AM -0500, Jeff Buchbinder wrote: Willy Tarreau wrote: I'm obviously interested in any problem report :-) One other OpenBSD build problem that I saw was that OBJS in Makefile.bsd seems to be missing: src/auth.o src/stick_table.o src/pattern.o oops

Re: [ANNOUNCE] haproxy-1.4.0

2010-02-26 Thread Willy Tarreau
On Fri, Feb 26, 2010 at 03:57:16PM -0500, Jeff Buchbinder wrote: With that patch it does seem to build the files that were getting stuck before under OpenBSD 4.3. Excellent, thanks very much Jeff for your quick response, I'm applying the patch now. Cheers, Willy

Re: option httpchk version 'trick'

2010-02-27 Thread Willy Tarreau
Hi Andrew, On Sat, Feb 27, 2010 at 03:15:25PM +1030, Andrew Commons wrote: Hi all, The ability to extend the option httpchk version argument string to dummy up a Host header is described as a 'trick' in the configuration documentation. I have found that the 'trick' can be extended to add

Re: sL flag

2010-02-27 Thread Willy Tarreau
On Fri, Feb 26, 2010 at 03:07:40PM -0800, Joe Williams wrote: I wasn't able to find it in the documentation, what does the sL termination flag stand for? strange. It means there was a server timeout during the last transfer from the server to the client. But normally the last transfer is

Re: option httpchk version 'trick'

2010-02-27 Thread Willy Tarreau
Hi Andrew, On Sat, Feb 27, 2010 at 07:59:27PM +1030, Andrew Commons wrote: Hi Willy, Thanks for the comprehensive response. My HAProxy experience is measured in days and the mailing list seems a great way to get support and your contributions are always spot on. HAProxy looks like a

Re: sL flag

2010-02-27 Thread Willy Tarreau
On Sat, Feb 27, 2010 at 10:17:12AM -0800, Joe Williams wrote: Looks like all the most recent sL's I have seen have been GET requests. OK thanks Joe. I will look into the code to see how we can produce that. Maybe it's normal, but no obvious case comes to my mind. Regards, Willy

Re: [ANNOUNCE] haproxy-1.4.0

2010-02-27 Thread Willy Tarreau
Hi Holger, On Sat, Feb 27, 2010 at 01:28:12PM +0100, Holger Just wrote: Hi all, On 2010-02-26 16:02, Willy Tarreau wrote: I'm obviously interested in any problem report :-) I'm trying to compile Haproxy 1.4 on Opensolaris Build 133 (i386 on a Core i7). This however fails. thanks

Re: Truncated health check response from real servers

2010-03-02 Thread Willy Tarreau
Hi Nick, On Tue, Mar 02, 2010 at 12:25:06PM +, Nick Chalk wrote: Hello Willy. On 25 February 2010 20:25, Willy Tarreau w...@1wt.eu wrote: On Mon, Feb 15, 2010 at 10:05:57AM +, Nick Chalk wrote: On 13 February 2010 10:40, Willy Tarreau w...@1wt.eu wrote: Indeed, with MSG_PEEK we

Re: ha proxy Nagios plugin

2010-03-02 Thread Willy Tarreau
Hi Jean-Christophe Stéphane, On Tue, Mar 02, 2010 at 02:28:57PM +0100, Jean-Christophe TOUSSAINT wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, For our own needs, a Nagios plugin has been developed to check haproxy activity (and hosts status). The plugin checks HAProxy

Re: [ANNOUNCE] haproxy-1.4.0

2010-03-02 Thread Willy Tarreau
Hi Holger, I could get the same errors on my ultra5 under solaris 8 which correctly builds 1.3. I finally tracked that down to the #define XOPEN_SOURCE 500 in auth.c. If I remove it, everything builds as before. Krzysztof, you told me you had to add it otherwise you got a warning on your

Re: [ANNOUNCE] haproxy-1.4.0

2010-03-02 Thread Willy Tarreau
Hi Krzysztof, On Wed, Mar 03, 2010 at 12:29:01AM +0100, Krzysztof Ol??dzki wrote: First, sorry for the problem I have made. :( hey please don't be sorry, here we say that we don't make omelettes without breaking eggs :-) Accoriding to crypt(3) from man-pages-3.21 it is required to define

Re: [ANNOUNCE] haproxy-1.4.0

2010-03-02 Thread Willy Tarreau
On Wed, Mar 03, 2010 at 12:39:48AM +0100, Willy Tarreau wrote: Finally, encryption was only tested on Linux and FreeBSD so it could be nice to verify if it works on Solaris in the same way (with -lcrypt) and to add USE_LIBCRYPT for ifeq ($(TARGET),solaris). OK I'm testing it now

Re: [ANNOUNCE] haproxy-1.4.0

2010-03-02 Thread Willy Tarreau
On Wed, Mar 03, 2010 at 01:02:16AM +0100, Krzysztof Ol??dzki wrote: On 2010-03-03 00:47, Willy Tarreau wrote: On Wed, Mar 03, 2010 at 12:39:48AM +0100, Willy Tarreau wrote: Finally, encryption was only tested on Linux and FreeBSD so it could be nice to verify if it works on Solaris in the same

Re: haproxy burst

2010-03-03 Thread Willy Tarreau
Hi Joe, On Wed, Mar 03, 2010 at 01:30:50PM -0500, Joe Stein wrote: Hi All, anyone have any ideas if this is something in version bug (do not want to upgrade if not) or is something I can control with configuration. So what I see running haproxy is when there are bursts (an additional lets

Re: Best way to use Haproxy for FTP connections

2010-03-03 Thread Willy Tarreau
On Wed, Mar 03, 2010 at 11:21:34AM +0100, Falco Schmutz wrote: Hi, I know this thread thanks you :-) I just want to know if there is a way to do this whiteout iptables. Not right now, we would need to develop an FTP protocol parser and the ability to expect incoming connections (basically just

Re: haproxy burst

2010-03-03 Thread Willy Tarreau
On Wed, Mar 03, 2010 at 02:34:46PM -0500, Joe Stein wrote: the problem got serious so I stood up another LB set of instances and installed v1.3.23 all traffic is getting routed over to it. what I used to see in the logs where just NOSRV 503 in the haproxy log once it hit max con. OK but

<    1   2   3   4   5   6   7   8   9   10   >