[ANNOUNCE] haproxy-2.4.19

2022-09-28 Thread Christopher Faulet
OR: stats: fixing stat shows disabled frontend status as 'OPEN' BUG/MINOR: log: improper behavior when escaping log data Brad Smith (1): BUILD: makefile: enable crypt(3) for NetBSD Christopher Faulet (25): MINOR: http: Add function to get port part of a host MINOR: http: Add

[ANNOUNCE] haproxy-2.5.9

2022-09-23 Thread Christopher Faulet
: support for additional PAUSED state BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN' BUG/MEDIUM: server: segv when adding server with hostname from CLI BUG/MINOR: log: improper behavior when escaping log data Brad Smith (1): BUILD: makefile: enable crypt(3) f

Re: [UK OFFICIAL] [PATCH] Issue 1812 - smtpchk option does not send a QUIT

2022-09-22 Thread Christopher Faulet
the necessary parts for next time! Hi, I merged your patch. Thanks ! -- Christopher Faulet

[ANNOUNCE] haproxy-2.6.6

2022-09-22 Thread Christopher Faulet
upport per os commit BUILD: makefile: enable crypt(3) for NetBSD Christopher Faulet (4): BUG/MINOR: h1: Support headers case adjustment for TCP proxies BUG/MINOR: task: Fix detection of tasks profiling in tasklet_wakeup_after() BUG/MINOR: mux-h1: Increment open_streams co

Re: [UK OFFICIAL] [PATCH] Issue 1812 - smtpchk option does not send a QUIT

2022-09-21 Thread Christopher Faulet
checks/4be_1srv_smtpchk_httpchk_layer47errors.vtc and reg-tests/checks/smtp-check.vtc) Thanks ! -- Christopher Faulet

Re: Health Checks and DNS lookups in stopping processes

2022-09-20 Thread Christopher Faulet
Le 9/19/22 à 21:04, Tim Düsterhus a écrit : Christopher, On 9/19/22 20:22, Christopher Faulet wrote: It is not exactly how it works. When HAProxy is reloaded, it stops to accept new connections and it closes idle HTTP connections on the server side and also on the client side. However

Re: Health Checks and DNS lookups in stopping processes

2022-09-19 Thread Christopher Faulet
hecks, dns resolution ...). -- Christopher Faulet

Re: Lua hangs with get line at end of request body

2022-08-29 Thread Christopher Faulet
Le 8/29/22 à 12:30, Christopher Faulet a écrit : There is a bug. I'm able to reproduce it with your lua script. I will fix it soon. FYI, I pushed a fix[1] to 2.7-DEV. It will be backported soon. [1] https://github.com/haproxy/haproxy/commit/4a20972a -- Christopher Faulet

Re: Lua hangs with get line at end of request body

2022-08-29 Thread Christopher Faulet
ith your lua script. I will fix it soon. Thanks ! -- Christopher Faulet

Re: Lua: processing expired on timeout when using core.msleep

2022-08-25 Thread Christopher Faulet
Le 8/23/22 à 20:08, Bren a écrit : --- Original Message --- On Tuesday, August 23rd, 2022 at 4:26 AM, Christopher Faulet wrote: It could be good to share your config, at least the part calling your lua script. I think these are the only relevant bits: tcp-request inspect-delay

Re: Lua: processing expired on timeout when using core.msleep

2022-08-23 Thread Christopher Faulet
? Bren Hi, It could be good to share your config, at least the part calling your lua script. But this error can be triggered when the inspect-delay for tcp rules evaluation is expires. It can also happen when a read error is detected or an abort with abortonclose option. -- Christopher Faulet

Re: Possible problem with custom error pages -- backend server returns 503, haproxy logs 503, but the browser gets 403

2022-08-23 Thread Christopher Faulet
n your bug report on solr project, HAProxy logs report HTTP/3.0 requests but the screenshots show HTTP/2.0 requests. And the payload for the 403 response is talking about 50x errors. What is the 50x.http error file content ? -- Christopher Faulet

Re: Server timeouts since HAProxy 2.2

2022-08-04 Thread Christopher Faulet
is affected by 369 known bugs (http://www.haproxy.org/bugs/bugs-2.2.9.html). You must update it to 2.2.25 first. Regards, -- Christopher Faulet

Re: "Success" logs in HTTP frontends

2022-07-29 Thread Christopher Faulet
Le 7/29/22 à 11:21, Tim Düsterhus a écrit : Hi On 7/29/22 11:10, Christopher Faulet wrote: What is your version ? At first glance, I can't find such log message in the code. It could come from a lua module. I'm seeing the same for both 2.4.x and 2.6.x. Christian and I had a short chat about

Re: "Success" logs in HTTP frontends

2022-07-29 Thread Christopher Faulet
ession is killed with no connection/ssl error. For instance, an SSL connection rejected because of a "tcp-request session" rule (so after the SSL handshake). The same may happen with a listener using the PROXY protocol. Regards, -- Christopher Faulet

[ANNOUNCE] haproxy-2.2.25

2022-07-28 Thread Christopher Faulet
BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs BUG/MINOR: server: do not enable DNS resolution on disabled proxies BUG/MINOR: cli/stats: add missing trailing LF after "show info json" MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames BUG/MINOR: peers/config: always fill the bind_conf's argument -- Christopher Faulet

[ANNOUNCE] haproxy-2.4.18

2022-07-27 Thread Christopher Faulet
s : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Brad Smith (1): BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX Christian Ruppert (1): BUILD: Makefile: Add Lua 5.4 autodetect Chris

[ANNOUNCE] haproxy-2.5.8

2022-07-25 Thread Christopher Faulet
pending-bugs Reviewed bugs: http://www.haproxy.org/l/reviewed-bugs Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Brad Smith (1): BUILD: makefile: Fix install(1) handling for

[ANNOUNCE] haproxy-2.6.2

2022-07-22 Thread Christopher Faulet
ad Smith (1): BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX Christian Ruppert (1): BUILD: Makefile: Add Lua 5.4 autodetect Christopher Faulet (16): BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created BUG/MINOR: http

Re: Issue - consecutive early-hint defined with "if" condition

2022-07-06 Thread Christopher Faulet
Le 7/4/22 à 11:19, Christopher Faulet a écrit : Le 6/30/22 à 11:47, Krzysztof Kozłowski a écrit : Hi, I’m struggling with consecutive early-hint statements defined with if condition. Considering below configuration: http-request early-hint Link "<https://example.com/style1.cs

Re: Issue - consecutive early-hint defined with "if" condition

2022-07-04 Thread Christopher Faulet
excuse me if I miss any information required to properly identify the problem. If I’m missing anything - please do let me know. I would appreciate any help here. I’m using HAProxy version 2.4.15-7782e23 Thanks ! Indeed, I can confirm the issue. I'll try to fix it soon. -- Christopher Faulet

Re: Haproxy [2.4.0] cvs stats return " * L7OK,0 " in check_status and check_code fields

2022-06-24 Thread Christopher Faulet
appreciated. Thanks in advance. Hi, When the health-check is running, the status reported is the last known status and it is prefixed with an asterisks. In this case the code is set to 0 in the CSV output. So it is expected. The same is done for the agent-check. -- Christopher Faulet

Re: Segfault on 2.6.0 with TCP switching to HTTP/2

2022-06-17 Thread Christopher Faulet
ps://dgl.cx/2022/04/showing-you-your-actual-http-request) I pushed a fix in 2.7-dev : https://github.com/haproxy/haproxy/commit/82af3c68 It will be backported to 2.6 soon. A 2.6.1 should be released the next week. Thanks ! -- Christopher Faulet

Re: Segfault on 2.6.0 with TCP switching to HTTP/2

2022-06-16 Thread Christopher Faulet
8080 backend cloud-regions.bodge.cloud mode http server cr localhost:8080 Hi, Thanks ! I'm able to reproduce the segfault. I'm on it. -- Christopher Faulet

Re: Ability to set response in lua via HTTP class

2022-06-09 Thread Christopher Faulet
in a buffer. With this solution, it is not possible to rewrite a too big response body. If you want to rewrite a large response, you must write a lua filter. It is more difficult. The API is a bit rough. But it is more versatile. -- Christopher Faulet

Re: [PATCH] CLEANUP: Re-apply xalloc_size.cocci (2)

2022-06-02 Thread Christopher Faulet
Le 6/1/22 à 21:58, Tim Duesterhus a écrit : This reapplies the xalloc_size.cocci patch across the whole `src/` tree. Merged. Thanks ! -- Christopher Faulet

Re: SV: Traffic from HAproxy get error 401 and 500

2022-06-02 Thread Christopher Faulet
in "show stat" command output or in the csv export of the HTTP state page. Regards, -- Christopher Faulet

Re: Peers using heavily single cpu core

2022-05-17 Thread Christopher Faulet
and also validate everything works fine. -- Christopher Faulet

[ANNOUNCE] haproxy-2.0.29

2022-05-13 Thread Christopher Faulet
Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Christopher Faulet (7): Revert "BUG/MAJOR: mux-pt: Always destroy the backend connection on detach" BUG/MEDIUM: http-act: Don'

[ANNOUNCE] haproxy-2.2.24

2022-05-13 Thread Christopher Faulet
ugs Reviewed bugs: http://www.haproxy.org/l/reviewed-bugs Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Christopher Faulet (2): DOC: config: Update doc for PR/PH session states to warn about r

[ANNOUNCE] haproxy-2.4.17

2022-05-13 Thread Christopher Faulet
wnload/2.4/src/CHANGELOG Pending bugs : http://www.haproxy.org/l/pending-bugs Reviewed bugs: http://www.haproxy.org/l/reviewed-bugs Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Christophe

[ANNOUNCE] haproxy-2.5.7

2022-05-13 Thread Christopher Faulet
ugs Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Boyang Li (2): BUG/MEDIUM: lua: fix argument handling in data removal functions DOC/MINOR: fix typos in the lua-api document Christoph

Re: [PATCH] BUG/MEDIUM: lua: fix argument handling in data removal functions

2022-05-13 Thread Christopher Faulet
as offset, and 4th (nonexistent) as length. hlua_http_msg_del_data() also improperly checks arguments. This patch fixes argument handling in both. Must be backported to 2.5. Thanks ! Both patches were merged. -- Christopher Faulet

[ANNOUNCE] haproxy-2.2.23

2022-05-06 Thread Christopher Faulet
src/CHANGELOG Pending bugs : http://www.haproxy.org/l/pending-bugs Reviewed bugs: http://www.haproxy.org/l/reviewed-bugs Code reports : http://www.haproxy.org/l/code-reports Latest builds: http://www.haproxy.org/l/dev-packages --- Complete changelog : Christopher Faulet (12):

[ANNOUNCE] haproxy-2.3.20

2022-04-29 Thread Christopher Faulet
hangelog: http://www.haproxy.org/download/2.3/src/CHANGELOG Pending bugs : http://www.haproxy.org/l/pending-bugs Reviewed bugs: http://www.haproxy.org/l/reviewed-bugs Code reports : http://www.haproxy.org/l/code-reports --- Complete changelog : Christopher Faulet (14):

[ANNOUNCE] haproxy-2.4.16

2022-04-29 Thread Christopher Faulet
ode reports : http://www.haproxy.org/l/code-reports --- Complete changelog : Christopher Faulet (19): DOC: config: Explictly add supported MQTT versions BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing BUG/MEDIUM: mux-h1: Properly detect f

[ANNOUNCE] haproxy-2.5.6

2022-04-26 Thread Christopher Faulet
lete changelog : Aleksandar Lazic (1): DOC: remove double blanks in configuration.txt Christopher Faulet (21): BUG/MINOR: rules: Initialize the list element when allocating a new rule DOC: config: Explictly add supported MQTT versions BUG/MEDIUM: mux-fcgi: Properly handle return

Re: Check interval rise and fall behaviour

2022-03-30 Thread Christopher Faulet
t; instead. The same is true when the server is set to UP state, "2/2 UP" is never reported because "0/3 DOWN" is reported. And you're right, with a rise value lower than the fall value it is quicker to consider a DOWN server as UP than the opposite. But with a rise to 2, we need 2 successful health checks to set a server UP. -- Christopher Faulet

[ANNOUNCE] haproxy-2.0.28

2022-03-14 Thread Christopher Faulet
http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Alex (1): DOC: use the req.ssl_sni in examples Andrew McDermott (1): BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies Christian Ruppert (1): DOC: Fix usage/examples of deprecated A

[ANNOUNCE] haproxy-2.2.22

2022-03-14 Thread Christopher Faulet
ad/2.2/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christian Ruppert (1): DOC: Fix usage/examples of deprecated ACLs Christopher Faulet (9): BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request BUG/MINOR: st

[ANNOUNCE] haproxy-2.3.19

2022-03-14 Thread Christopher Faulet
y Tarreau (2): BUG/MINOR: stream: make the call_rate only count the no-progress calls BUILD: tree-wide: mark a few numeric constants as explicitly long long -- Christopher Faulet

[ANNOUNCE] haproxy-2.4.15

2022-03-14 Thread Christopher Faulet
p=haproxy-2.4.git Changelog: http://www.haproxy.org/download/2.4/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christian Ruppert (1): DOC: Fix usage/examples of deprecated ACLs Christopher Faulet (12): BUG/MEDIUM: h

[ANNOUNCE] haproxy-2.5.5

2022-03-14 Thread Christopher Faulet
: http://git.haproxy.org/git/haproxy-2.5.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy-2.5.git Changelog: http://www.haproxy.org/download/2.5/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christopher Faulet (16): BU

Re: server check inter and timeout check relation

2022-03-14 Thread Christopher Faulet
k and the beginning of the following one. This is independent on the evaluation time. Thus in your example, a health-check will still run 2s after the end of the previous one, independently on its duration. -- Christopher Faulet

Re: SV: Incompatible with 'frontend http-request header rule'

2022-03-04 Thread Christopher Faulet
fied in the frontend, the backend or split. It depends on your other rules, if any. With your config snippet, it doesn't matter. -- Christopher Faulet

[ANNOUNCE] haproxy-2.3.18

2022-03-02 Thread Christopher Faulet
htx: prevent unbounded loop in http_manage_server_side_cookies Christopher Faulet (9): BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer BUG/MEDIUM: cli: Never wait for more data on client shutdown BUG/MINOR: sink: Use the right field in appctx context in rele

Re: Incompatible with 'frontend http-request header rule'

2022-03-02 Thread Christopher Faulet
} { url_beg /login } http-response track-sc0 src table table_login_limiter if { capture.req.uri -m beg /login } { status 401 } You can also match on the url in an http-request rule to set a variable and use it in the http-response rule. Regards, -- Christopher Faulet

[ANNOUNCE] haproxy-2.4.14

2022-02-25 Thread Christopher Faulet
ttp://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christopher Faulet (6): BUG/MINOR: sink: Use the right field in appctx context in release callback BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw c

[ANNOUNCE] haproxy-2.5.4

2022-02-25 Thread Christopher Faulet
ort processing if response buffer allocation fails Willy Tarreau (3): BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy() REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks CI: github: enable pool debugging by default -- Christopher Faulet

Re: DOC issue with http-request return

2022-02-02 Thread Christopher Faulet
' followed by a condition but found ‘…'. Hi, The ACL part in the "http-request return" rule is optional. Otherwise it means there is a bug in the parser. But, first of all, you should share the failing rule and the HAProxy version you use. Thanks, -- Christopher Faulet

Re: invalid request

2022-01-13 Thread Christopher Faulet
the one performed during the request analysis). And if it should be extended to CONNECT requests. In practice, it is only an issue for CONNECT requests because the absolue-form is not the common form for URIs in H1. -- Christopher Faulet

Re: [PATCH] BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl

2022-01-12 Thread Christopher Faulet
and :( ... -- Christopher Faulet

Re: [PATCH] BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl

2022-01-11 Thread Christopher Faulet
is may be done with the following 3 steps: * First, stop to change "srv->check.use_ssl" value * Then, stop to change the agent settings in srv_set_ssl() because there is no ssl support for agent-check. * Finally, fix the bug identified by William, adding the according documentation. Note I don't know if all this stuff works properly with the server-state file... -- Christopher Faulet

[ANNOUNCE] haproxy-2.5.1

2022-01-11 Thread Christopher Faulet
/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Bertrand Jacquin (1): BUG/MINOR: lua: remove loop initial declarations Christopher Faulet (15): BUG/MINOR: cache: Fix loop on cache entries in "show cache" BUG/MEDIUM: cl

Re: [PATCH] BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl

2022-01-11 Thread Christopher Faulet
k.use_ssl" is also changed. I don't remember why this field is updated. But this may prevent any dynamic change on healtcheck. I must read the code to be sure. -- Christopher Faulet

[ANNOUNCE] haproxy-2.4.12

2022-01-11 Thread Christopher Faulet
=haproxy-2.4.git Changelog: http://www.haproxy.org/download/2.4/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christopher Faulet (1): BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data William Lallemand (1): BUG

Re: Issue with uploads and HAProxy 2.4.11

2022-01-10 Thread Christopher Faulet
rom 2984ccfc1f5c4ca1157f7a498dcdc7de2f7ba934 Mon Sep 17 00:00:00 2001 From: Christopher Faulet Date: Mon, 10 Jan 2022 17:27:51 +0100 Subject: [PATCH] BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data A regression was introduced by commit 140f1a585 ("BUG/MEDIUM: mux-h1: Fix splicing by properly d

Re: HAP 2.3.16 A bogus STREAM [0x559faa07b4f0] at "cache store filter"

2022-01-04 Thread Christopher Faulet
Le 1/4/22 à 10:26, Aleksandar Lazic a écrit : On 04.01.22 10:16, Christopher Faulet wrote: Le 12/25/21 à 23:59, Aleksandar Lazic a écrit : Hi. as the message tell us that we should report this to the developers I do so :-) ``` Dec 24 01:10:31 lb1 haproxy[20008]: A bogus STREAM

Re: HAP 2.3.16 A bogus STREAM [0x559faa07b4f0] at "cache store filter"

2022-01-04 Thread Christopher Faulet
issue. I'm unable to reproduce the spinning loop but I can freeze infinitely a stream. It is probably just a matter of timing. On my side, it is related to L7 retries. Could you confirm you have a "retry-on" parameter in your configuration ? Thanks ! -- Christopher Faulet

Re: Is it expected that "capture response" does not get headers when "http-request return" is used

2021-12-08 Thread Christopher Faulet
Le 12/6/21 à 08:25, Christopher Faulet a écrit : Le 12/4/21 à 13:25, Aleksandar Lazic a écrit : Hi. I try to capture the response header "dst_conn" from "http-request return" but in %hs isn't the value. ``` podman logs -f haproxy-dest [NOTICE] (1) : New worker #1 (

Re: Is it expected that "capture response" does not get headers when "http-request return" is used

2021-12-05 Thread Christopher Faulet
ture info from generated responses at this stage. However, it is probably possible to add a "capture" action to the "http-afer-response" ruleset. This would able to you to capture your header with the following config: declare capture response len 4 http-after-response capture hdr(dst_conn) id 0 At first glance it seems trivial. I will check that. -- Christopher Faulet

Re: [PATCH] BUG/MEDIUM: sample: Fix memory leak in sample_conv_jwt_member_query

2021-12-03 Thread Christopher Faulet
gth, decoded_header->area, decoded_header->size); if (ret == -1) Thanks, merged now ! -- Christopher Faulet

Re: default-server behavior different in 2.2 vs. 2.4?

2021-12-01 Thread Christopher Faulet
e 2.4 is attached to this mail. -- Christopher FauletFrom 7f689d5265a973d66b702e57ba02e866c1db400c Mon Sep 17 00:00:00 2001 From: Christopher Faulet Date: Wed, 1 Dec 2021 09:50:41 +0100 Subject: [PATCH] BUG/MINOR: server: Don't rely on last default-server to init server SSL context During post-

Re: default-server behavior different in 2.2 vs. 2.4?

2021-11-29 Thread Christopher Faulet
when the configuration is validated, we rely on the last "default-server" line parsed in the backend section to finalize the SSL configuration of servers in this backend. It is of course a bug. We may probably rely on a flag instead. I'll investigate. Thanks ! -- Christopher Faulet

[ANNOUNCE] haproxy-2.2.19

2021-11-29 Thread Christopher Faulet
browsing : http://git.haproxy.org/?p=haproxy-2.2.git Changelog: http://www.haproxy.org/download/2.2/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christopher Faulet (11): BUG/MEDIUM: stream-int: Block reads if channel cannot receive m

Re: [PATCH 1/1] BUG/MINOR: lua: remove loop initial declarations

2021-11-25 Thread Christopher Faulet
*/ - for (size_t i = 0; i < 2; i++) { + for (i = 0; i < 2; i++) { lua_State *L = hlua_states[i]; const char *error; Thanks, merged now with backports info updated. -- Christopher Faulet

[ANNOUNCE] haproxy-2.3.16

2021-11-24 Thread Christopher Faulet
y.org/download/2.3/src/ Git repository : http://git.haproxy.org/git/haproxy-2.3.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy-2.3.git Changelog: http://www.haproxy.org/download/2.3/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Comp

[ANNOUNCE] haproxy-2.4.9

2021-11-24 Thread Christopher Faulet
r conn_install_mux_be MEDIUM: server/backend: implement websocket protocol selection MINOR: server: add ws keyword Christopher Faulet (10): DOC: config: Fix typo in ssl_fc_unique_id description BUG/MINOR: http-ana: Apply stop to the current section for http-response rules

Re: [PATCH] MINOR: promex: backend aggregated server check status

2021-11-09 Thread Christopher Faulet
will add backports info in the commit message and merge it. Thanks ! -- Christopher Faulet

[ANNOUNCE] haproxy-2.2.18

2021-11-05 Thread Christopher Faulet
maury Denoyelle (3): BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc BUG/MINOR: server: allow 'enable health' only if check configured BUILD: fix compilation on NetBSD Christopher Faulet (31): BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI

Re: [PATCH] REGTESTS: Use `feature cmd` for 2.5+ tests (2)

2021-11-05 Thread Christopher Faulet
Le 11/4/21 à 21:12, Tim Duesterhus a écrit : This patch effectively is identical to 7ba98480cc5b2ede0fd4cca162959f66beb82c82. Merged, thanks Tim! -- Christopher Faulet

Re: Problem with the var() sample fetch function

2021-10-27 Thread Christopher Faulet
owing ACLs will be rejected while it works today: http-request set-var(txn.foo) str("forbidden") http-request deny if { var(txn.foo) "forbidden" } With the proposed change, "-m str" will be required. -- Christopher Faulet

Re: compression offload ... in default section

2021-10-20 Thread Christopher Faulet
Le 10/20/21 à 01:24, Björn Jacke a écrit : Hi, On 19.10.21 11:06, Christopher Faulet wrote: Sorry Björn, I missed your reply. It is strange, there is no known bug in this area for now. There is probably something in the request or response headers preventing the compression to be enabled. I

Re: PH disconnects, but "show errors" has 0 entries ?

2021-10-19 Thread Christopher Faulet
ssible with the PH termination state. If you are using http-after-response rules, it may explain this error. However, share your redacted configuration too. It can help me to explain what you observe. -- Christopher Faulet

Re: PH disconnects, but "show errors" has 0 entries ?

2021-10-19 Thread Christopher Faulet
r is encountered, HAProxy returns a 500-Internal-Error response. You can change that to make it fails silently. To do so, take a look at the "strict-mode" http-response action. -- Christopher Faulet

Re: compression offload and http2

2021-10-19 Thread Christopher Faulet
Le 10/15/21 à 12:04 PM, Björn Jacke a écrit : On 15.10.21 10:10, Christopher Faulet wrote: It should work. What is your HAProxy version ? 2.4.7 Björn Sorry Björn, I missed your reply. It is strange, there is no known bug in this area for now. There is probably something in the request

Re: compression offload and http2

2021-10-15 Thread Christopher Faulet
or is it by design and just the documentation might need some clarification here. Hi, It should work. What is your HAProxy version ? -- Christopher Faulet

Re: [PATCH] BUG/MINOR: lua: Fix lua error handling in `hlua_config_prepend_path()`

2021-10-12 Thread Christopher Faulet
return 0; err2: Thanks Tim, now merged ! -- Christopher Faulet

Re: Use variables in healthchecks

2021-10-08 Thread Christopher Faulet
can indeed rely on "%si". But you must use 2.2.14 or newer. -- Christopher Faulet

[ANNOUNCE] haproxy-2.4.7

2021-10-04 Thread Christopher Faulet
git.haproxy.org/?p=haproxy-2.4.git Changelog: http://www.haproxy.org/download/2.4/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ --- Complete changelog : Christopher Faulet (2): BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule

Re: [ANNOUNCE] haproxy-2.4.5

2021-10-04 Thread Christopher Faulet
, it was reported after the 2.4.6 was released. We try to figure out if it is a major problem or not for now. But it crashes HAProxy. So, a 2.4.7 will probably be released very soon. -- Christopher Faulet

Re: [ANNOUNCE] haproxy-2.4.5

2021-10-03 Thread Christopher Faulet
Le 10/3/21 à 7:46 PM, Matthias Fechner a écrit : Am 03.10.2021 um 08:53 schrieb Christopher Faulet: Damned ! You're right... It is a typo in the commit feca2a453 ("BUG/MINOR: filters: Always set FLT_END analyzer when CF_FLT_ANALYZE flag is set"). It also affects the 2.5-DEV. th

Re: [ANNOUNCE] haproxy-2.4.5

2021-10-03 Thread Christopher Faulet
Le 10/3/21 à 9:06 AM, Vincent Bernat a écrit : ❦ 3 October 2021 08:53 +02, Christopher Faulet: I will push a fix. As a workaround, you can temporarily disable the HTTP compression filter. Will you release 2.4.6 or should we push packages for 2.4.5 with the patch? For Debian/Ubuntu, I

Re: [ANNOUNCE] haproxy-2.4.5

2021-10-03 Thread Christopher Faulet
Le 10/2/21 à 10:54 AM, Matthias Fechner a écrit : Am 01.10.2021 um 18:09 schrieb Christopher Faulet: HAProxy 2.4.5 was released on 2021/10/01. It added 69 new commits after version 2.4.4. Damned ! You're right... It is a typo in the commit feca2a453 ("BUG/MINOR: filters: Always set FL

[ANNOUNCE] haproxy-2.4.5

2021-10-01 Thread Christopher Faulet
implement a refcount for dynamic servers MINOR: global: define MODE_STOPPING BUG/MINOR: server: do not use refcount in free_server in stopping mode MINOR: server: return the next srv instance on free_server BUG/MINOR: stats: use refcount to protect dynamic server on dump C

Re: AW: Disabling HTTP/1.1 pipelining

2021-09-24 Thread Christopher Faulet
that haproxy does not support HTTP/1.1 pipelining. I agree. Pipelining should at least be removed from "option http-server-close" description. And section 1.1 should be reword to be clear on this point. -- Christopher Faulet

Re: Disabling HTTP/1.1 pipelining

2021-09-20 Thread Christopher Faulet
ve you several hints. Regards, -- Christopher Faulet

Re: [PATCH 1/2] CLEANUP: Include check.h in flt_spoe.c

2021-09-20 Thread Christopher Faulet
/flt_spoe.c @@ -17,6 +17,7 @@ #include #include #include +#include #include #include #include Thanks Tim! Both patches merged now. -- Christopher Faulet

Re: Is it possible to capture the body of http responses?

2021-09-15 Thread Christopher Faulet
Le 9/14/21 à 3:14 AM, Ryan Burn a écrit : On Thu, Sep 9, 2021 at 12:22 AM Christopher Faulet <mailto:cfau...@haproxy.com>> wrote: Le 8/11/21 à 2:53 AM, Ryan Burn a écrit : > I'm working on integrating HAProxy with traceable.ai <http://traceable.ai> <http

Re: Is it possible to capture the body of http responses?

2021-09-09 Thread Christopher Faulet
ow, but it may be a solution to analyze the whole message payload, regardless its size. However, It may be painful because the API may be incomplete and because dealing with multiple buffers is not simple, especially if you don't want to forward the payload before the end of analysis. -- Christopher Faulet

Re: http-request return bytes_read from v2.3 to v2.4

2021-07-26 Thread Christopher Faulet
the HTX representation. It counted for 1 byte. This explains the difference of 5 bytes between 2.3 and 2.4. -- Christopher Faulet

[ANNOUNCE] haproxy-2.0.23

2021-07-16 Thread Christopher Faulet
ch_url_ip/port BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check Christopher Faulet (34): DOC: Explicitly

[ANNOUNCE] haproxy-2.2.15

2021-07-16 Thread Christopher Faulet
lock when changing maxconn via agent-check REGTESTS: fix maxconn update with agent-check Christopher Faulet (35): BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers BUG/MINOR: stream: Decrement server current session counter on L7 retry BUG/MINOR: stream: R

[ANNOUNCE] haproxy-2.3.11

2021-07-07 Thread Christopher Faulet
ble uninit sockaddr in fetch_url_ip/port BUG/MAJOR: server: prevent deadlock when using 'set maxconn server' BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check REGTESTS: fix maxconn update

[ANNOUNCE] haproxy-2.4.2

2021-07-07 Thread Christopher Faulet
lization on h1 requests MEDIUM: h2: apply scheme-based normalization on h2 requests REGTESTS: add http scheme-based normalization test Christopher Faulet (19): BUG/MINOR: server-state: load SRV resolution only if params match the config BUG/MINOR: server: Forbid to set fqdn on the CL

Re: proposed enhancement to mysql-check - accept account locked/password expired errors

2021-07-05 Thread Christopher Faulet
I guess that if no one has a better idea or any objections about this change, you can provide a patch. -- Christopher Faulet

Re: [PATCH] DOC: use CREATE USER for mysql-check

2021-07-05 Thread Christopher Faulet
and not recommended), the check only consists in parsing the Mysql Handshake Initialization packet or Merged now, thanks ! -- Christopher Faulet

Re: [PATCH]: BUILD/MEDIUM: set-mark openbsd support

2021-07-05 Thread Christopher Faulet
Le 7/3/21 à 10:22 AM, David CARLIER a écrit : Hi here a follow-up of the previous patch but this time for OpenBSD. Thanks, applied now ! -- Christopher Faulet

Re: Weird behavior of spoe between http and https requests

2021-06-14 Thread Christopher Faulet
your agent is properly decoding IPv6 values ? You may also try to do a network capture between HAProxy and your agent. -- Christopher Faulet

Re: [PATCH] DOC/MINOR: move uuid in the configuration to the right, alphabetical order

2021-06-02 Thread Christopher Faulet
Le 6/1/21 à 12:35 AM, Aleksandar Lazic a écrit : Fix alphabetical order of uuid merged now, thanks ! -- Christopher Faulet

  1   2   3   4   5   6   7   >