FW: LUA and doing things

2018-09-24 Thread Franks Andy (IT Technical Architecture Manager)
Sorry to be a nag, but anyone any ideas with this. Or is it just indicated to regularly parse log files (seems a bit of a hacky solution). Thanks! From: Franks Andy (IT Technical Architecture Manager) [mailto:andy.fra...@sath.nhs.uk] Sent: 21 September 2018 13:20 To: haproxy@formilux.org

LUA and doing things

2018-09-21 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Just hopefully a really quick question.. I would like to use LUA to, on connection use of a specific backend service, do something (like write an entry to a log file for example). I realise the example here is possibly locking etc but I'm not too worried at this point about that. LUA s

Cookies, load balancing, stick tables.

2018-03-28 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Hopefully an easy one, but I can't really find the solution. We've come up with a control system for haproxy, where we manually can clear stick table entries from a GUI. We're also using a cookie to set the server in a backend as we're expecting to deal with clients behind a nat device.

RE: Logging actual fetched URL after request is re-written

2018-03-28 Thread Franks Andy (IT Technical Architecture Manager)
ailto:clav...@haproxy.com] Sent: 27 March 2018 18:04 To: haproxy@formilux.org Cc: Franks Andy (IT Technical Architecture Manager) Subject: Re: Logging actual fetched URL after request is re-written Greetings, Sorry, pressed wrong button so didn't include on CC. On 03/27/2018 01:03 PM, Chad Lavoie

Logging actual fetched URL after request is re-written

2018-03-27 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Logging with HTTP as standard, the %{+Q}r log variable records the requested URL in the logs. I'd like to also record the URL that's actually fetch after an http-request set-path directive is given (for debugging purposes). It's linked to an application that provides next to no debuggi

RE: Peer tables don't synch on clear

2018-02-13 Thread Franks Andy (IT Technical Architecture Manager)
07:35 To: Franks Andy (IT Technical Architecture Manager); 'haproxy@formilux.org' Subject: Re: Peer tables don't synch on clear On 02/12/2018 04:28 PM, Franks Andy (IT Technical Architecture Manager) wrote: > Hi Fred, Hi Franks, Please bottom post when you reply. >Than

RE: Peer tables don't synch on clear

2018-02-12 Thread Franks Andy (IT Technical Architecture Manager)
2:56 To: Franks Andy (IT Technical Architecture Manager); 'haproxy@formilux.org' Subject: Re: Peer tables don't synch on clear On 02/08/2018 11:22 AM, Franks Andy (IT Technical Architecture Manager) wrote: > Hi all, Hello Franks, >   Haproxy 1.6.13 > >   I'

Peer tables don't synch on clear

2018-02-08 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Haproxy 1.6.13 I've checked the documentation again but can't see an option for this. We sometimes clear backup path server use for individual connections and whilst the peers synchronisation works for new connections, it doesn't clear on the secondary peer node we're using. Is this b

Storing characters in stick tables

2018-01-02 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, First of all happy new year! I'm using haproxy 1.8 in case that's relevant. I've set up optional client certificate checking against a CA we have at the place I work, which is working really well; I decline access to certain uris based on whether the client has a certificate that match

Quick question re errorloc urls

2017-11-03 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, We have a test haproxy instance that is using a letscrypt certificate, and is in a DMZ zone. We have internal network servers delivering an application via https using an internal CA certificate, and all works fine - the client connects, sees the letscrypt cert and since the load balan

FW: https status codes

2017-07-26 Thread Franks Andy (IT Technical Architecture Manager)
-Original Message- From: Franks Andy (IT Technical Architecture Manager) Sent: 26 July 2017 13:52 To: 'Aleksandar Lazic' Subject: RE: https status codes Thanks Alexander. I'd imagine that option httpchk GET /Login/Heartbeat HTTP/1.1\r\nHost:\ rsh-cp-iis1 presents the s

https status codes

2017-07-26 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, HAProxy 1.7.6 I have a hopefully easy question to answer - I'm trying to do server checks against 2x IIS nodes which require sending of the destination host name (virtual hosts) before delivering content. I'm trying to work out how to send the backend server name with the check reque

Quick (hopefully) question about clearing stick table entry

2017-05-10 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Is there a way to clear a stick table entry (using socat obviously) by referring to the individual 'reference' id given at the beginning of the entry, e.g. "0x7faef417d3ec" ? Looking at the manual it seems the clearing function is based on key (ip in my case) or data field - server id

RE: Choosing servers based on IP address

2015-06-05 Thread Franks Andy (IT Technical Architecture Manager)
cookies, stick tables and so on, just missed that fairly obvious "routing" option. Forgive my ignorance! Thanks again andy -Original Message- From: Holger Just [mailto:hapr...@meine-er.de] Sent: 04 June 2015 21:29 To: Franks Andy (IT Technical Architecture Manager) Cc: HAPr

FW: Choosing servers based on IP address

2015-06-02 Thread Franks Andy (IT Technical Architecture Manager)
I guess not then! I did see something about the newer version having some lua based choice of server, but it may have nothing to do with what I'm after. Not to worry. Thanks Andy From: Franks Andy (IT Technical Architecture Manager) [mailto:andy.fra...@sath.nhs.uk] Sent: 02 June 2015

Choosing servers based on IP address

2015-06-02 Thread Franks Andy (IT Technical Architecture Manager)
Hi all, Quick question - can anyone think of a way to change a server's weight based on some criteria, for example source IP address? It would be so useful when dealing with a common service that has two distinct sites, and rules in place that stop access to resources from the "wrong" site, like