Re: Does anyone still use examples/haproxy.spec ?

On 19-06-15 17:46:52, Tim Düsterhus wrote: >> [...] > > No objections from my side (and it can always be retrieved back from > git), I'm replying, because I want to suggest to take a look at the > other files in the folder as well: > > - auth.cfg : 10 years and IMO explained well in

Re: haproxy segfault

On 19-02-13 16:27:21, Hugues Alary wrote: > (Also, I've been looking for commit 451c5a88 and can't find it > anywhere). See http://git.haproxy.org/?p=haproxy-1.9.git;a=commit;h=451c5a88, also attached. Cheers, Georg From 451c5a8879a9d59b489ad5117c984044d41c8338 Mon Sep 17 00:00:00 2001 From:

Re: Segmentation faults (1.8.4-de425f6 2018/02/26)

On 18-03-23 19:40:20, Holger Amann wrote: > > Am 23.03.2018 um 17:59 schrieb Willy Tarreau : > > Holger, if you could send me your core and unstripped haproxy > > executable in private, that would be really cool. > > I tried to send it per mail, but it came back because of size limit

Re: Updating the unofficial GitHub mirror

On 18-03-12 07:22:22, Dan Kohn wrote: > > > > On Mon, Mar 12, 2018 at 10:42:30AM +0100, Pavlos Parissis wrote: > > > Have you asked the maintainer of the github fork to change the project to > > > 'unofficial-haproxy' or something else? > > > > On Mon, Mar 12, 2018 at 6:15 AM, Willy Tarreau

Re: Haproxy 1.7.10 constantly restarting

Hi Aleksey, On 18-03-12 07:04:05, Aleksey Gordeev wrote: > Thank you for answer. Sorry for stupid question. Found it. I forget > about letsencrypt. it restarts when renewing certificates. Change it so it does only restart after renewing. I guess, Most of time it only checks, but doesn't renew.

Re: Is the data on stats page global across all processes?

Hi, On 18-03-05 09:42:56, flamese...@yahoo.co.jp wrote: > Or only the data of the process to which the stat is bind to? AFAIK, that is correct. Cheers, Georg signature.asc Description: Digital signature

Re: 4xx statistics made useless through health checks?

Hi, On 17-11-21 14:20:39, Daniel Schneller wrote: > > On 21. Nov. 2017, at 14:08, Lukas Tribus wrote: > > [...] > > Instead of hiding specific errors counters, why not send an actual > > HTTP request that triggers a 200 OK response? So health checking is > > not exempt from the

Re: Haproxy refuses new connections when doing a reload followed by a restart

On 17-10-08 21:55:37, William Lallemand wrote: > * To change the KillMode to the default, which should kill -SIGTERM > all processes on a stop or restart. But if I remember well, it leads > to a bad exit code on the systemd side and display an error. There is SuccessExitStatus [1] which might

Re: Enable SSL Forward Secrecy

On 17-08-30 09:33:23, Julian Zielke wrote: > Hi, > > I'm struggeling with enabling SSL forward secrecy in my haproxy 1.7 setup. > > So far the global settings look like: > > tune.ssl.default-dh-param 2048 # tune shared secred to 2048bits > > ssl-default-bind-options force-tlsv12 no-sslv3 >

Re: Removed health check in combination with load-server-state-from-file (Bug)

On 17-08-30 11:12:15, Julien Laffaye wrote: > On Wed, Aug 30, 2017 at 10:38 AM, Cyril Bonté wrote: > > > Well health checks or not, the state file reflects the state you want. > > You can absolutely imagine cases where health checks were never activated, > > and someone used

Re: Problem getting cookies to work

Hi Brian, On 17-08-15 14:15:26, Gibson, Brian (IMS) wrote: > Well that worked. I didn't see any warnings before at startup no, but > that may be because I use puppet to deploy my configurations and > restart services as needed. Thanks for finding my simple mistake! I'm using puppet as well,

Re: Could a logical server share its check status to another?

Hi, On 17-08-15 04:46:32, baiyang wrote: > > [...] > > My question is: Could the logical servers such as "n1_1" and "n1_2" > share the same check status as "n1_0"? This eliminates the need for > these logical servers to send duplicate requests to the same physical > server. > > e.g.: When "n1_0"

Re: Update host for http health check

Hi Jonathan, On 17-06-13 17:04:22, Jonathan Quinn wrote: > I'm trying to implement a health check within HAProxy but update the > host depending on the backend server the request is sent to: I'm curious: Did you implement anything which would be worth to share? Cheers, Georg signature.asc

Re: Http error 503 on failover

Hi Niklas, On 17-06-27 16:27:37, Niklas Dallmann wrote: > However for my purposes the client shall not have any notice of a > downtime. Not sure if this is possible. > Therefore I want to make Haproxy health check the servers before > connecting them to the client. Is it possible to achieve

Re: [PATCH] MEDIUM: ssl: allow haproxy to start without default certificate

On 17-06-14 13:58:01, Dennis Jacobfeuerborn wrote: > On 12.06.2017 16:21, Emmanuel Hocdet wrote: > > In haproxy 1.8dev, default certificate can now be optional. > > This patch allow that. > > This looks like a big footgun. While the idea is interesting and > useful if this is to be considered at

Re: Update host for http health check

Hi Jonathan, On 17-06-13 17:04:22, Jonathan Quinn wrote: > I'm trying to implement a health check within HAProxy but update the > host depending on the backend server the request is sent to: > > [...] > > Each machine would ideally be checked, so I was interested if there > was a way to

Re: issues with ALPN and h2 on frontend

Hi Matt, On 17-03-16 12:00:46, Matt Jamison wrote: > When I have alpn and h2 set on the bind line, no requests can get past > the frontend. I disabled all back ends so that at least the 503 error > page I have set would come up but no go. > > [...] > > Am I doing something wrong? This currently

Re: Problems with haproxy 1.7.3 on FreeBSD 11.0-p8

Hi Matthias, On 17-03-06 09:34:07, Matthias Fechner wrote: > are problem with haproxy 1.7.3 on FreeBSD 11.0-p8 known? I'm not running FreeBSD myself, but have a look at [1]: In the follow-ups to this thread there are two more people reporting problems. Cheers, Georg [1]