Re: Does haproxy utlize openssl with AES-NI if present?

2021-10-27 Thread Christopher Cox
On 10/27/21 5:47 PM, Shawn Heisey wrote: On 10/27/2021 2:54 PM, Lukas Tribus wrote: I'd be surprised if the OpenSSL API calls we are using doesn't support AES-NI. Honestly that would surprise me too.  But I have no idea how to find out whether it's using the acceleration or not, and the

Re: SOAP service healthcheck

2018-12-07 Thread Christopher Cox
tcp-check is what we used for this. On 12/7/18 3:59 PM, Baptiste wrote: Hi, You can also forge a http post with the tcp-check. This would be less hacky. Baptiste Le jeu. 6 déc. 2018 à 09:11, Māra Grīnberga > a écrit : I mean, thanks! I'll look into it! Mara

Re: active-active haproxy behind Azure Load Balancer

2018-07-12 Thread Christopher Cox
I don't speak "Azure", but if they have something that claims to be a load balancer, then "sure", just have to deal with stickiness issues and of course the fact that you're load balancing load balancers. (you likely need Application Gateway) On 07/12/2018 05:50 PM, musafir wrote: Hey Folks,

Re: Haproxy 1.8 rpm for CentOS 6

2018-06-18 Thread Christopher Cox
Full support of 6 ended in May, 2016 and Maint Support Lvl 1 ended May, 2017. It's now in the last period of retirement support, lvl 2... which does last until Nov, 2020, but updates are only going to be for very major security related things (and it's highly subjective). Most enterprise

Re: RHEL distribution still uses HAProxy 1.5

2018-05-01 Thread Christopher Cox
On 05/01/2018 09:26 AM, Norman Branitsky wrote: We opened a ticket with RHEL Support to ask when they would upgrade to at least HAProxy 1.7. This was their reply: Most recent comment: On 2018-05-01 10:22:28, Patil, Ravindra commented: "Hello The reason 1.7 (as well and 1.6 and 1.8) are not

Re: Pregenerated SSL sessions interest?

2018-02-16 Thread Christopher Cox
On 02/16/2018 04:51 PM, Christopher Lane wrote: On Thu, Feb 15, 2018 at 3:02 PM Aleksandar Lazic > wrote: Hi. Am 15.02.2018 um 22:42 schrieb Christopher Lane: > Internally, my company uses pregenerated SSL sessions. Just for