Re: ALERT:sendmsg logger #1 failed: Resource temporarily unavailable (errno=11)

rarily > unavailable (errno=11) > > Has anyone seen this before or any pointers where to look for to correct > this? > > Thanks, > Igor > > Google has several entries on the subject: > https://bugs.launchpad.net/kolla/+bug/1549753 > http://comments.gmane.org/gm

Re: Select All for Backends on Stats Dashboard

of > work and I'm convinced that this is a nice, user-friendly (hopefully minor) > feature to add :-) > > -=david=- > > On 30 December 2016 at 14:56, Jeff Palmer <j...@palmerit.net> wrote: >> >> I'd be happy if i could just manually select 2 or more backends a

Re: Select All for Backends on Stats Dashboard

I'd be happy if i could just manually select 2 or more backends and hit apply once. On Dec 30, 2016 7:31 AM, "David Harrigan" wrote: > FYI, here is the patch: > > From 218a6c42d47ccf2d8970e1d332c91429a2c34bbb Mon Sep 17 00:00:00 2001 > From: David Harrigan

Re: HAProxy clustering

check that creates load make it a little > smarter and cache its result for a while > > On Fri, 16 Dec 2016 at 19:56, Jeff Palmer <j...@palmerit.net> wrote: >> >> backend health should be in on the sticktables that are shared between >> >> all instances, ri

Re: HAProxy clustering

les on the Ansible host, but assembled to a single config file on >> the nodes. >> This gives also the opportunity to deploy the configuration on one node >> only. >> On the Ansible host, the configuration changes are tracked with git. >> >> I also considered an automatic replication of the config, between the >> nodes but... I did not like the idea. >> >> >> .marcoc >> > -- Jeff Palmer https://PalmerIT.net

Re: HAProxy clustering

I would be interested in seeing the ansible playbook, if it's sanitized? On Fri, Dec 16, 2016 at 10:19 AM, Michel blanc <mblanc.netwo...@gmail.com> wrote: > Le 16/12/2016 à 16:08, Jeff Palmer a écrit : > >>> Hi >>> I would like to know what is the best

Re: HAProxy clustering

. > > Currently I am looking for a method to prevent the unused haproxys from > doing health checks. I'll check "incrond with unison", thanks for the > pointer. > > ~stephan > -- Jeff Palmer https://PalmerIT.net

Re: [ANNOUNCE] experimental spam filtering

> > By the way I found why it was tagged as "unsure" instead of "spam". I > didn't specify "-M" in the script so it didn't consider the input file > was an mbox, hence it probably used to consider the headers in the > evaluation, leading to a confusing result. With "-M" it clearly states > it's a spam. > > I've now updated the script to locally archive these e-mails instead > of delivering them. I'll keep an eye on the for some time and will > deliver them manually if I see some wrong blocking. > > Cheers, > Willy > -- Jeff Palmer https://PalmerIT.net

Re: Need help to configure ha proxy

gt; > > > acl api.example hdr(host) -i api-example.com > > > > #cluster > > use_backend b.example if beta.example > > > use_backend z.api if api.example > > > #Frontend Server > > > backend b.example > > mode http > > balance roundrobin > > option forwardfor > >server server01 10.0.0.1:80 check > > > ##API > > backend z.api > > mode http > > balance roundrobin > > option forwardfor > > server api01 192.168.1.1:80 check > > > > Regard's > Harish Chander > 8529142143 > > -- Jeff Palmer https://PalmerIT.net

Re: Help

; option smtpchk > option forwardfor > #source 0.0.0.0 usesrc clientip > server postfix2 192.168.56.53:25 send-proxy check > server postfix3 192.168.56.54:25 send-proxy check > > > Exim with défault config > > Le 02/08/2016 à 23:12,

Re: Help

Sorry to ask ... > > Can you send me a url or a conf for the support EXIM4 ? > > > Thx a lot > > Best regards > -- > > -- Jeff Palmer https://PalmerIT.net

Re: stats page redirecting to https

ystems : > epoll : pref=300, test result OK > poll : pref=200, test result OK > select : pref=150, test result OK > Total: 3 (3 usable), will use epoll. > > Linux lb3 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:08 UTC 2014 > x86_64 x86_64 x86_64 GNU/Linux > > -- Jeff Palmer https://PalmerIT.net

Re: HAProxy Configuration Best Practices

accessible and transparent, >> encouraging civic pride, enhancing commerce and ensuring that elections are >> fair, fast and accurate. >> > > > Don't forget the following points: > - setup proper timeouts (enable slow post protection) > - configure an accurate health check > - enable the stats page > > Baptiste > -- Jeff Palmer https://PalmerIT.net

Re: SSL Cipher stats

her used (total SSLv3, > total RC4 etc.) without necessarily turning on connection logging and > extract the data from there? > > > > Thank you. > > > > Regards, > > Stefan -- Jeff Palmer https://PalmerIT.net

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

ave HTTPS enabled. > I forgot to remove the old "redirectPort" from tomcat's connector setting, > i did remove it now and restarted servers but the error still persist. > > Thank you, > Zoltan. > > > On Tue, Mar 1, 2016 at 2:19 PM, Jeff Palmer <j...@palmerit.net

Re: Haproxy 1. 5.14 + Tomcat 8 giving random 502 errors

You have tomcat on 8443 which is usually an SSL enabled port, but none of your backend server definitions enable SSL. In the 3 'server' lines towards the end of your config, add 'ssl' at the end. Let us know! On Mar 1, 2016 5:57 AM, "Zoltan Lorincz" wrote: > Hi all, > > i am

Re: SNI and haproxy backend selection.

You'd probably want to use host header ACLs, and then a use_backend with each acl to select the correct backend. On Feb 20, 2016 7:12 PM, "Eliezer Croitoru" wrote: > Is it possible to have one TLS frontend(with wildcard certificate) port > that will select the backends

Re: New discussion platform to exchange and discuss configurations

nge in the > future when admins share the management effort, but one thing at a > time please. > > So please test it, send your feedback there in the site feedback > category. Be gentle with me, I'm debuting :-) > > The URL for this new platform is http://discourse.haproxy.org/ > > Thanks to Discourse for this! > Willy > > -- Jeff Palmer https://PalmerIT.net

Re: New discussion platform to exchange and discuss configurations

08, 2015 at 10:18:27AM -0500, Jeff Palmer wrote: > Hi Jeff, > >> Occasionally I see (or help people) with haproxy configs on reddit. >> some of them may be useful as config examples in the new discourse >> site. >> >> As a matter of preference, would you prefer we

Re: Retry on HAProxy1 -> HAproxy2 -> 1 backend

ut my read of the config manual is > that it won't trigger a retry (just a failed health check). I also realize > that, in general, retrying on a 503 has idempotency issues so using a custom > 5xx code might be a better signal to indicate no-work was done. > > Thanks -- Jeff Palmer https://PalmerIT.net

Re: haproxy management web service ?

, 2015 at 3:10 PM, Ed Young <e...@summitbid.com> wrote: > So there a web service api that would support bringing nodes up and Down > programmatically for orchestration of upgrades and other maintenance events? > > -- > - Ed -- Jeff Palmer https://PalmerIT.net

Re: haproxy management web service ?

t;Haproxy@formilux.org<mailto:Haproxy@formilux.org>" >> <Haproxy@formilux.org<mailto:Haproxy@formilux.org>> >> Subject: haproxy management web service ? >> >> So there a web service api that would support bringing nodes up and Down >> programmatically for orchestration of upgrades and other maintenance events? >> >> -- >> - Ed > > > > > -- > - Ed -- Jeff Palmer https://PalmerIT.net

Re: HA Proxy - packet capture functionality

rk or application > related and would like to gather some packet captures in order to understand > the behavior. > > > > Ideally, we would like to filter the capture with the source ip address of > the remote site. > > > > Can you kindly advise how we can achieve this

Re: [call to comment] HAProxy's DNS resolution default query type

is > not cached, ANY will only return A, even if we "resolve-prefer" > ipv6. > > It makes no sense to keep it, especially if it remains default. > > > > Regards, > > Lukas > > > > > -- Jeff Palmer https://PalmerIT.net

Re: Linux or FreeBSD ?

under Debian for years, but the new IT want to put it under >> FreeBSD. >> Any cons ? >> >> Thanks. >> > > > > Should be roughly the same I think. -- Jeff Palmer https://PalmerIT.net

Re: Need Help

As I previously mentioned, your frontend will need to use mode TCP. You v have a defaults of mode http, and don't change the mode on your front end. Give that a try, and report back. On Sep 19, 2015 9:44 AM, "Nitesh Kumar Gupta" wrote: > > Hi All, > > I am repeating

Re: Need Help

I also noticed, you aren't doing anything on the frontend to determine if the connection is TCP or http. In fact, this looks nothing like the example configuration I suggested. On Sep 19, 2015 10:12 AM, "Jeff Palmer" <j...@palmerit.net> wrote: > As I previously mentioned, your

Re: Suggestions for a UDP/Websockets Load balancer

Websockets uses TCP, and thus can be load balanced like any other TCP service. As for the sip/UDP part, haproxy doesn't support UDP, so that won't be an option. That said, there is still hope. SIP is already capable of load balancing and failure itself via the use of DNS SRV records. You lose

Re: Need Help

if any perticular link will > come that will go via tcp > > So can you help me how can i setup this > > -- > Regards > Nitesh Kumar Gupta -- Jeff Palmer https://PalmerIT.net

Re: Need Help

al > Mean suppose if I want anything that will access help that should go to TCP > rest should work with normal http or HTTPS > How can I configure this one > > On Sep 18, 2015 7:05 AM, "Jeff Palmer" <j...@palmerit.net> wrote: >> >> You can have haproxy lis

Re: Need Help

server4 > > > IS that making clear you or need more explanation > > > On Fri, Sep 18, 2015 at 7:11 AM, Jeff Palmer <j...@palmerit.net> wrote: >> >> Can you give us an example scenario? Tell us the actual services you >> want to use on the frontends and bac

Re: Need Help

Please do, I'd be interested in knowing if it worked in reality, the way I suspect it'd work in theory! On Thu, Sep 17, 2015 at 10:29 PM, Nitesh Kumar Gupta <niteshgupta...@gmail.com> wrote: > Thanks will try and let you know if it works > > On Sep 18, 2015 7:44 AM, &

Re: certificate generation

Can you explain what the overall goal is? I suspect that even if you could dynamically generate new certificates on the fly, the overhead to do so would be prohibitively expensive. If you are attempting to do this for security, it's probably worth pointing out that it is insanely easy to

Re: Easy haproxy redundancy

similar software which causes IP Address changes). A common DNS name with two A records is not a reliable solution. So, could you please provide some opinions/advice on how to move on with our available resources? Thanks in advance, Nick -- Jeff Palmer https://PalmerIT.net

Re: Example of crt-list

for each servername in the config file), but above and beyond that I want to understand the options, advantages, disadvantages. AJ ONeal -- Jeff Palmer https://PalmerIT.net

Re: Forwarding issue

Describing the issues you think it's causing fire haproxy would also be helpful. On Aug 12, 2015 4:37 PM, Baptiste bed...@gmail.com wrote: On Wed, Aug 12, 2015 at 6:34 PM, Roman Gelfand rgelfa...@gmail.com wrote: Why would the following apache directives cause problems for haproxy.

Re: Forwarding issue

https if { ssl_fc } On Wed, Aug 12, 2015 at 5:12 PM Jeff Palmer j...@palmerit.net wrote: Describing the issues you think it's causing fire haproxy would also be helpful. On Aug 12, 2015 4:37 PM, Baptiste bed...@gmail.com wrote: On Wed, Aug 12, 2015 at 6:34 PM, Roman Gelfand rgelfa