force close connection for HTTP/2

2022-11-08 Thread Benedikt Fraunhofer
Hello Haproxy-List, I need a way to forcefully close a HTTP/2 connection with a haproxy-internally generated response ('http-request redirect" or "http-request return") Basically what "Connection: close" ("option httpclose" or "no option http-keepalive") did for 1.1. I know the HTTP/2 spec provi

Connect to SNI-only server (haproxy as a client)

2014-08-18 Thread Benedikt Fraunhofer
Hello List, I'm trying to help an java6-app that can't connect to a server which seems to support SNI-only. I thought I could just add some frontend and backend stancas and include the sni-only server as a server in the backend-section like so: server a 1.2.3.4:443 ssl verify none force-tlsv1

Re: Low performance when using mode http for Exchange-Outlook-Anywhere-RPC

2012-05-08 Thread Benedikt Fraunhofer
Hello Willy, 2012/5/8 Willy Tarreau : > For such border-line uses, you need to enable "option http-no-delay". By great! that did it. > default, haproxy tries to merge as many TCP segments as possible. But in > your case, the application is abusing the HTTP protocol by expecting that Does hapro

Low performance when using mode http for Exchange-Outlook-Anywhere-RPC

2012-05-08 Thread Benedikt Fraunhofer
Hello List, I placed haproxy in front of our exchange cluster for OutlookAnywhere Clients (that's just RPCoverHTTP, port 443). SSL is terminated by pound and forwards traffic on loopback to haproxy. Everything works but it's awfully slow when i use "mode http"; requests look like this: RPC_IN_DA

Re: Matching URLs at layer 7

2010-04-28 Thread Benedikt Fraunhofer
Hi *, > (2) Host header is www.example.com > (3) All is good! Pass request on to server. > (2) Host header is www.whatever.com > (3) All is NOT good! Flick request somewhere harmless. If that's all you want, you should be able to go with acl xxx_host hdr(Host) -i xxx.example.com block

Re: Matching URLs at layer 7

2010-04-28 Thread Benedikt Fraunhofer
Hi Andrew, 2010/4/28 Andrew Commons : > url_beg >  Returns true when the URL begins with one of the strings. This can be used to >  check whether a URL begins with a slash or with a protocol scheme. > > So I'm assuming that "protocol scheme" means http:// or ftp:// or whatever I would assum

Re: Matching URLs at layer 7

2010-04-28 Thread Benedikt Fraunhofer
Hi *, 2010/4/28 Andrew Commons : >        acl xxx_url      url_beg        -i http://xxx.example.com >        acl xxx_url      url_sub        -i xxx.example.com >        acl xxx_url      url_dom        -i xxx.example.com The Url is the part of the URI without the host :) A http request looks like

Re: issue with using digest with jetty backends

2010-04-06 Thread Benedikt Fraunhofer
Hi, 2010/4/6 Matt : > < HTTP/1.1 100 Continue > < HTTP/1.1 200 OK Somehow this looks very odd to me :) Dunno if that helps, but we had problems with curl and digest authentication some time ago and solved it using curl --digest -H "Expect:" [...] but we might have used a very old (buggy) ver

Re: [PATCH] [MINOR] CSS & HTML fun

2009-10-13 Thread Benedikt Fraunhofer
Hello, 2009/10/13 Dmitry Sivachenko : > End tag for is optional according to really? Something new to me :) > http://www.w3.org/TR/html401/struct/lists.html#edef-UL hmm. "" is optional (implied by next "" or closing "", "" not? Start tag: required, End tag: required the line stating "

Re: HAproxy not accepting http health check response

2009-05-25 Thread Benedikt Fraunhofer
Ah, forgot to cc the list in my first reply, so sorry for the following fullquote. 2009/5/25 Benedikt Fraunhofer : > Hello *, > > 2009/5/25 Sanjeev Kumar : >>  My config file. > [...] >>   option httpchk HEAD /check.tst HTPP/1.0 > > do you really have "HTPP&qu