Re: reqrep syntax

2017-05-08 Thread Aristedes Maniatis
ttps://cbonte.github.io/haproxy-dconv/1.7/configuration.html#http-request -- --> Aristedes Maniatis CEO, ish https://www.ish.com.au GPG fingerprint CBFB 84B4 738D 4E87 5E5C 5EFA EF6A 7D2E 3E49 102A signature.asc Description: OpenPGP digital signature

reqrep syntax

2017-05-08 Thread Aristedes Maniatis
\2 \3' Have I got all the above right? I'm finding examples on the internet like this [2] where the author believes the first part is the url scheme which I think is wrong. Thanks Ari [1] https://cbonte.github.io/haproxy-dconv/1.7/configuration.html#4.2-reqrep [2] https://from

Re: redirect with variables

2016-09-27 Thread Aristedes Maniatis
On 27/09/2016 6:10pm, Aristedes Maniatis wrote: > I'd like to redirect subdomains in a generic way like this: > > acme.example.com -> acme.example2.com > > > I tried this: > > redirect prefix http://%[hdr(host),field(1,'.')].example2.com code 301

redirect with variables

2016-09-27 Thread Aristedes Maniatis
hdr()] notation in this location. Is there a way to achieve this? Cheers Ari -- ------> Aristedes Maniatis CEO, ish https://www.ish.com.au GPG fingerprint CBFB 84B4 738D 4E87 5E5C 5EFA EF6A 7D2E 3E49 102A signature.asc Description: OpenPGP digital signature

Re: Allowing 500 errors to pass through

2015-11-10 Thread Aristedes Maniatis
to > misconfiguration and doesn't warrant removing the whole server). > > > Probably, but if you don't care about the HTTP request or response, why not > just use TCP health checks? Ah, of course! When looking for complex solutions I missed the simple thin

Allowing 500 errors to pass through

2015-11-10 Thread Aristedes Maniatis
n be cleverer about removing them from the pool if they die. Am I right in guessing that question (2) might be solved by the new features in haproxy 1.6? Thanks Ari -- --> Aristedes Maniatis ish http://www.ish.com.au Level 1, 30 Wilson Street Newtown 2042 Aust

Re: SSL hardware acceleration

2014-05-27 Thread Aristedes Maniatis
i_load="YES" in loader.conf should take care of the AES side of things If the NSA wanted credit card numbers they could just go get them from Mastercard directly, and there isn't really much else of great espionage interest in the transactional data. So I'm not overly concerned

SSL hardware acceleration

2014-05-27 Thread Aristedes Maniatis
But it would be nice to know the headroom is there. Cheers Ari [1] http://www.cavium.com/processor_security_nitrox-III.html -- ------> Aristedes Maniatis ish http://www.ish.com.au Level 1, 30 Wilson Street Newtown 2042 Australia phone +61 2 9550 5001 fax +61 2 9550 40

CVE-2011-3192 and Range requests

2011-08-26 Thread Aristedes Maniatis
://article.gmane.org/gmane.comp.apache.announce/59 -- --> Aristedes Maniatis ish http://www.ish.com.au Level 1, 30 Wilson Street Newtown 2042 Australia phone +61 2 9550 5001 fax +61 2 9550 4001 GPG fingerprint CBFB 84B4 738D 4E87 5E5C 5EFA EF6A 7D2E 3E49 102A

Re: listen -> unique IP:port

2010-01-07 Thread Aristedes Maniatis
On 8/01/10 1:31 AM, Willy Tarreau wrote: Hi, On Fri, Jan 08, 2010 at 12:51:46AM +1100, Aristedes Maniatis wrote: I'm working on a web UI for administering the haproxy config and I have a question I can't find the answer to in the documentation. Are the listener blocks unique with

listen -> unique IP:port

2010-01-07 Thread Aristedes Maniatis
i Maniatis -- --> Aristedes Maniatis ish http://www.ish.com.au Level 1, 30 Wilson Street Newtown 2042 Australia phone +61 2 9550 5001 fax +61 2 9550 4001 GPG fingerprint CBFB 84B4 738D 4E87 5E5C 5EFA EF6A 7D2E 3E49 102A