Re: Haproxy and UTF8-encoded chars

2012-07-26 Thread Brane F. Gračnar
strings you want to put into URI or query string. Check out encodeURIComponent() -- Brane F. Gračnar skrbnik aplikacij/applications manager e: brane.grac...@tsmedia.si TSmedia, d.o.o. a: Cigaletova 15, 1000 Ljubljana; Slovenia t: +386 1 473 00 10 f: +386 1 473 00 16

Re: acl routing/redirect to specific backend system

2012-06-26 Thread Brane F. Gračnar
On 06/26/2012 10:17 AM, Joeri Blokhuis | DongIT wrote: Thank you for your reply Bapiste. My setup is using HTTPS so I can't use your suggestion. Is there any other solution when using HTTPS? Yes, you can put ssl offloader (stud, stunnel, nginx) in front of haproxy. Cheers, Brane

Re: [ANNOUNCE] haproxy 1.5-dev10

2012-05-14 Thread Brane F. Gračnar
10x for great progress!!! I have a question regarding IP based stick tables. Currently i have the following setup: backend some_backend BEGIN: Session stickyness stick on src table STICK_some_backend stick on src6 table STICK6_some_backend backend STICK_some_backend

Re: [ANNOUNCE] haproxy 1.5-dev10

2012-05-14 Thread Brane F. Gračnar
On 05/14/2012 11:15 AM, Willy Tarreau wrote: IPv4 addresses can be cast to IPv6 addresses, so if you need to store both IPv4 and IPv6 addresses, just use the IPv6 one and your IPv4 entries will automatically be converted when stored : backend some_backend BEGIN: Session

Re: haproxy 1.5dev7 server check failed with IPv6

2012-03-30 Thread Brane F. Gračnar
On 03/29/2012 10:20 PM, Sander Klein wrote: Are you sure it's not an config error on the webserver side? I've been running dev7 for quite some time and do a lot of IPv6 checks. Never had any problems with it. Same here. Best regards, Brane

Re: [PATCH] MEDIUM: stats: Add `show events` command.

2012-03-26 Thread Brane F. Gračnar
On 03/25/2012 07:55 AM, Aman Gupta wrote: A 1 127.0.0.1:50869 - 127.0.0.1:9418 F 1 127.0.0.1:50869 - 127.0.0.1:9418 | 127.0.0.1:50870 - 127.0.0.1:6000 C 1 127.0.0.1:50869 - 127.0.0.1:9418 Is it possible to use [IP]:port format? We're already living in IPv6 world... Best regards,

Re: question about reloading haproxy

2012-02-10 Thread Brane F. Gračnar
On 02/10/2012 10:53 AM, Michele Mazzucco wrote: Hello Brane, yes, but that is equivalent to running the script as root... the effective user ID is 0. Nope, it's not :) You can configure sudo to allow specific user to run only /etc/init.d/haproxy reload without entering password. Your

Re: Haproxy crashes?

2012-01-24 Thread Brane F. Gračnar
On 01/24/2012 09:55 AM, Łukasz Michalski wrote: W dniu 2012-01-23 12:44, Thomas Bender pisze: I have no idea why haproxy stops working from time to time..There is not much traffic on this system and I can not see any reasons (no peaks, etc) why it randomly crashes up to 10 times a day

Re: ACL to IPv6

2012-01-18 Thread Brane F. Gračnar
On 01/18/2012 01:59 PM, Agustin Lopez wrote: Hello! I will like to know if it is possible set one ACL to filter IPv6 addresses. I have read that IPv4 is Ok. Some like: frontend ... acl ipv6_ok src :XXX::0:0:0:0:0/48 Nope, matching ipv6 addresses is

Re: SSL best option for new deployments

2011-12-13 Thread Brane F. Gračnar
On 12/13/2011 09:02 PM, John Lauro wrote: Been using haproxy for some time… but have not used it with SSL yet. I do need to preserve the IP address of the original client. So either transparent (is that possible when going through stunnel or other and haproxy on the same box), or

Re: SSL best option for new deployments

2011-12-13 Thread Brane F. Gračnar
On 12/13/2011 10:43 PM, David Prothero wrote: I've been using stunnel with the X-Forwarded-For patch. Is stud preferable to stunnel for some reason? Stunnel usually uses thread-per-connection architecture - as you probably know this programming model has serious scaling issues. Stud is

Re: git clone hangs?

2011-11-23 Thread Brane F . Gračnar
On Wednesday 23 of November 2011 07:58:26 Willy Tarreau wrote: It is possible there are random network issue from time to time, I remember that git is particularly sensible to this as I've already had trouble cloning kernels in the past. Willy, have you considered migration of git repository

Re: Using HAProxy for ldap

2011-10-24 Thread Brane F. Gračnar
On Monday 24 of October 2011 14:29:07 Danie Weideman wrote: Is it possible to loadbalance between two active master ldap servers? If so I would like for one to be always persistent. Something like: frontend FE_ldap bind1.2.3.4:389 modetcp defailt_server

Re: php $_server variable when using haproxy stunnel

2011-10-24 Thread Brane F. Gračnar
On Monday 24 of October 2011 20:48:33 Amol wrote: Hi, i was trying to check on my php variables using the following code on both my servers ?php if($_SERVER['HTTPS']) echo 'https'; else echo 'Not Https'; echo BR; $port = $_SERVER['SERVER_PORT']; echo $port; echo BR;

Re: php $_server variable when using haproxy stunnel

2011-10-24 Thread Brane F. Gračnar
On Monday 24 of October 2011 23:13:54 Amol wrote: Thanks Brane for the reply but setting these options in my haproxy config reqidel ^Server-Protocol: reqadd Server-Protocol:\ https if src 127.0.0.1 gives me these errors $ sudo /etc/init.d/haproxy restart * Restarting haproxy haproxy

Re: Communicating with HA Proxy using Python

2011-10-06 Thread Brane F. Gračnar
On Wednesday 05 of October 2011 20:54:24 Deepak Jha wrote: Hi, I am new to HaProxy, so I need some information regarding HAProxy. Basically I want to communicate with HAProxy in a virtual environment. This may include requesting it for some data or giving it some data. I want to know is it

Re: 500s with 1.4.18 and 1.5d7

2011-10-03 Thread Brane F. Gračnar
On Monday 03 of October 2011 20:09:17 Hank A. Paulson wrote: I am not sure if these counts are exceeding the never threshold 500 when haproxy encounters an unrecoverable internal error, such as a memory allocation failure, which should never happen I am not sure what I can do

Re: Source based session stickyness

2011-09-28 Thread Brane F. Gračnar
On Tuesday 27 of September 2011 21:13:01 Willy Tarreau wrote: Hi Brane, You can have only one type per stick-table but one stick-table per backend. So you can arbitrarily declare that the first backend stores IPv4 addresses and the second one stores IPv6 addresses. You can have several (I

Source based session stickyness

2011-09-27 Thread Brane F. Gračnar
Hello! Is there a possibility to use source-based session stickyness when same backend is shared between many frontends, some with ipv6, some with ipv4 listeners? Something like: frontend FE4 bind 127.0.0.1:8001 accept-proxy default_backend BACK frontend FE6 bind

Re: HAProxy 1.5-dev7 attempting to connect to real server port of twice virtual server port

2011-09-21 Thread Brane F. Gračnar
On Wednesday 21 of September 2011 17:30:05 Nick Chalk wrote: Afternoon all. We have come across an interesting problem with HAProxy 1.5-dev7: with the config below, the proxy attempts to connect to a real server port of twice the virtual server's port. listen v1 bind

Re: haproxy at amazon

2011-09-20 Thread Brane F. Gračnar
On Tuesday 20 of September 2011 02:02:27 Dean Hiller wrote: We are running haproxy at amazon and running some load tests and seem to be hitting some bottleneck between haproxy and webservers or haproxy itself. How can you tell when haproxy is maxed out? Will cpu hit 100% or is it some other

Re: PROXY protocol and setting headers X-Forwarded-Protocol=https ou X-Forwarded-Ssl=on

2011-09-19 Thread Brane F. Gračnar
On Monday 19 of September 2011 06:18:45 Willy Tarreau wrote: frontend xxx bind 1.2.3.4:80 bind /var/run/haproxy/sock-xxx accept-proxy But this requires that the ssl termination supports unix sockets and I believe that stud currently does not. Just a quick question, Willy;

Re: [PATCH] Read acl included files relative to the configuration file

2011-09-08 Thread Brane F. Gračnar
On Thursday 08 of September 2011 11:21:34 Finn Arne Gangstad wrote: On Thu, Sep 08, 2011 at 07:43:46AM +0200, Willy Tarreau wrote: Hi again, This morning I had an better idea : pass the config directory parameter on the command line and have haproxy chdir() to it. That way, everything

Re: X-Forwarded-For contortions

2011-08-15 Thread Brane F. Gračnar
On Friday 12 of August 2011 20:17:11 Bryan Talbot wrote: What are my other options? There are multiple backends so having one shared front end and duplicating the backend sections and putting the XFF handling there isn't any better. Routing connections through the proxy twice for every hit

Re: haproxy API patch

2011-08-15 Thread Brane F. Gračnar
On Sunday 14 of August 2011 22:01:53 Jeff Buchbinder wrote: I've been working on an API patch, where certain functionality is exposed over the stats HTTP service. The fork where I have been working on this is available here: https://github.com/jbuchbinder/haproxy The full patch (which I

Re: https from source to destination

2011-07-14 Thread Brane F. Gračnar
On Thursday 14 of July 2011 05:10:44 James Bardin wrote: Some IT contracts suck. ;) Yes, they do :) I guess your only option is nginx, which supports https upstreams. You can nginx use nginx_http_upstream_fair (http://wiki.nginx.org/HttpUpstreamFairModule) module to achieve fair load

Re: Proxy Protocol in 1.4.x ?

2011-07-09 Thread Brane F. Gračnar
On Friday 08 of July 2011 23:17:12 Sébastien Estienne wrote: http://devblog.bu.mp/introducing-stud ). Today we have the choice between: - haproxy 1.4 + patched stunnel - haproxy 1.5 dev + stud - patched haproxy 1.4 + stud There is also fourth option: - patched haproxy 1.4.x + patched stunnel

Re: Proxy Protocol in 1.4.x ?

2011-07-08 Thread Brane F. Gračnar
On Thursday 07 of July 2011 18:30:10 Sebastien Estienne wrote: Hello, I'd like to use stud https://github.com/bumptech/stud with Haproxy for SSL support. Stud implement the haproxy proxy protocol, and i'd like to know if this will be backported to haproxy 1.4 ? First, thanks for pointing

Re: error with ipv6 backend www server

2011-06-15 Thread Brane F. Gračnar
On Wednesday 15 of June 2011 09:12:00 Willy Tarreau wrote: The server address syntax is : server name ip:port So you should have a colon and not a space before '80' : 3ffe::21da:7:3c06:7c4c:8215:2:80 Note that the syntax is non-ambiguous because the last colon is

Re: url_beg

2011-06-13 Thread Brane F. Gračnar
On Friday 10 of June 2011 16:11:02 Gerd Müller wrote: same effect :( Do you have option http-server-close in your backend specification? Brane

Re: haproxy participates to world IPv6 day

2011-06-08 Thread Brane F. Gračnar
On Wednesday 08 of June 2011 07:42:24 Willy Tarreau wrote: Hi all, The haproxy website was registered among about 300 other ones which participates to the world IPv6 day event : Willy, preparations for IPv6 day would be a really big challenge if HaProxy would not exist. Thanks! Best

Re: Haproxy Reg Exps ...

2011-06-06 Thread Brane F. Gračnar
On Monday 06 of June 2011 11:56:05 Georgi Georgiev wrote: Hi to all , Yesterday I’ve try to match on regexp from client user-agent and redirect it .. The configuration is on frontend is like this: …… acl test_match hdr_reg -i user\-agent:\

Re: [PATCH] include configuration directive for haproxy 1.5-dev3

2010-12-15 Thread Brane F. Gračnar
On Wednesday 15 of December 2010 15:18:55 L. Alberto Giménez wrote: On 14/12/2010 20:30, Brane F. Gračnar wrote: Hello :) Hi Brane, I haven't had time to test your patch, but after a visual review made some doubts to come up. It also applies to 1.4.10. @@ -5343,6 +5440,40 @@ int

PROXY protocol and SSL session information

2010-12-14 Thread Brane F. Gračnar
Hello there! I was wondering how to push information about SSL session (cipher, strength, certificate info) to backends. This is usualy done by injecting request headers before sending request to application servers or webserver handlers. I've read proxy protocol specification and i don't see