# /proxy/haproxy -vv -c -f l2cr.cfg
Available polling systems :
kqueue : pref=300, test result OK
#proxy/haproxy -V -d -f /proxy/lr.cfg -n 8192
Available polling systems :
select : pref=150, test result OK
You are comparing two different configurations, are you sure non of them
Hello,
Lr.cfg and l2cr.cfg are both the same files :)
-Mensagem original-
De: Lukas Tribus [mailto:luky...@hotmail.com]
Enviada em: quinta-feira, 30 de maio de 2013 12:46
Para: Fred Pedrisa; haproxy@formilux.org
Assunto: RE: Help with kQueue
# /proxy/haproxy -vv -c -f l2cr.cfg
with the latest version, looks like it will use kqueue
!! but select fail ? :D
-Mensagem original-
De: Lukas Tribus [mailto:luky...@hotmail.com]
Enviada em: quinta-feira, 30 de maio de 2013 12:46
Para: Fred Pedrisa; haproxy@formilux.org
Assunto: RE: Help with kQueue
# /proxy/haproxy -vv -c
Hi Fred,
Here is what happens with the latest version, looks like it will use kqueue
!! but select fail ? :D
I guess you have a maxsock FD_SETSIZE condition, which in recent releases
disables select(). See [1] and [2].
I'm not sure what bug/change you run into, but I guess its enough to know
, but would be cool
having native support for active mode !
Sincerely,
Fred
-Mensagem original-
De: Lukas Tribus [mailto:luky...@hotmail.com]
Enviada em: quinta-feira, 30 de maio de 2013 20:09
Para: Fred Pedrisa; haproxy@formilux.org
Assunto: RE: RES: Help with kQueue
Hi Fred,
Here
De: Fred Pedrisa [mailto:fredhp...@hotmail.com]
Enviada em: quinta-feira, 30 de maio de 2013 02:09
Para: 'haproxy@formilux.org'
Assunto: Help with kQueue
Hello, Guys.
Sorry for disturbing, and for the first e-mail I sent, I thought it was an
automated mailing list, requiring to subscribe
Hi, All
Can anyone help me about haproxy use_backend doesn't work if dst port is 8080,
protocol is POST when using 'if HTTP'.
The problem is that I want to balance my gateway http traffic to one program
(which can proxy traffic, listen on 127.0.0.1:4800). And I write my haproxy.cfg
request, there is a single cert in
HAProxy.
Unless you want to recypher traffic to your tomcat servers.
Baptiste
On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R ram.eas...@gmail.comwrote:
Thanks all so much for your help and also for updating the article:-)
I have a doubt...As per your
Dear Team,
We are trying to load balance two app servers running on tomcat with ssl
enabled using HAPROXY , but we couldn’t find proper resources to configure
the same
Please share us the steps to configure the same which will help us a lot
Thank you..!
Regards,
Eswar
-professional-services
Lukas
Date: Thu, 21 Mar 2013 19:35:37 +0530
Subject: Please help to configure Haproxy with SSL support
From: ram.eas...@gmail.com
To: haproxy@formilux.org
Dear Team,
We are trying to load balance two app servers running on tomcat
the configuration,
I would suggest you acquire commercial support:
http://www.exceliance.fr/en/haproxy-professional-services
Lukas
Date: Thu, 21 Mar 2013 19:35:37 +0530
Subject: Please help to configure Haproxy with SSL support
From: ram.eas
I actually started with
http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/
, but that's out of date; the sni options have changed.
Hi Robin
I fixed the article today.
Baptiste
On Thu, Mar 21, 2013 at 08:02:03PM +0100, Baptiste wrote:
I actually started with
http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/
, but that's out of date; the sni options have changed.
Hi Robin
I fixed the article today.
Thanks all so much for your help and also for updating the article:-)
I have a doubt...As per your explanation there are totally 3 certificates
placed..They are
1)haproxy.pem
2)cert1
3)cert2
Can you please say to which server each certificate belongs to..? Below is
my sample
no, as per our explanation and your request, there is a single cert in
HAProxy.
Unless you want to recypher traffic to your tomcat servers.
Baptiste
On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R ram.eas...@gmail.comwrote:
Thanks all so much for your help and also for updating the article
servers.
Baptiste
On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R ram.eas...@gmail.comwrote:
Thanks all so much for your help and also for updating the article:-)
I have a doubt...As per your explanation there are totally 3 certificates
placed..They are
1)haproxy.pem
2)cert1
On 12/27/2012 1:53 AM, Willy Tarreau wrote:
On Wed, Dec 26, 2012 at 07:03:02PM -0500, Brendon Colby wrote:
I was thinking that this is just standard browser behavior too. IE also does
this - it just seems to open fewer connections. This is why I was confused
and thought I was missing something,
Hi Brendon,
On Wed, Dec 26, 2012 at 03:09:37PM -0500, Brendon Colby wrote:
Greetings!
(Apparently GMail IPs are now listed in SORBs, so when I first sent this
through the Gmail web interface I got a bounce; I had to use Thunderbird
and IMAP.)
We just replaced our old commercial load
We have the same exact problem, only that dontlognull is not working for us
neither for some reason (we have 1 byte requests containing a single byte -
NULL - maybe something affected from a firewall or other device tunneling
the traffic to our LB).
We also concluded this is something the
On Dec 26, 2012, at 4:38 PM, Willy Tarreau w...@1wt.eu wrote:
Hi Brendon,
Thank you for the very well detailed analysis. I believe that some browsers
nowadays tend to proactively establish connections to visited websites, just
in case they will need them later. Since Chrome does
On Dec 26, 2012, at 5:57 PM, SBD sbd@gmail.com wrote:
We have the same exact problem, only that dontlognull is not working for us
neither for some reason (we have 1 byte requests containing a single byte -
NULL - maybe something affected from a firewall or other device tunneling the
Yes. sometimes I get it and sometimes don't though. As I said this is
probably have to do with some other device (hopefully).
Another interesting thing is, that we didn't have those kind of requests
all the time. It was started soon after changing the configuration from
single listen to
On Wed, Dec 26, 2012 at 07:03:02PM -0500, Brendon Colby wrote:
I was thinking that this is just standard browser behavior too. IE also does
this - it just seems to open fewer connections. This is why I was confused
and thought I was missing something, because it seems like normal browser
Hi Cyril,
Behind haproxy, I have 3 IIS servers. I installed an ISAPI filter called
F5XForwardedFor.
It's very strange, I don't have any problems with the other
frontend/backend in the same instance.
I continue to search.
Thanks for your help!!
Christophe
Le 17/12/12 22:13, « Cyril Bonté
Hi,
Finally, after a lot of tests, I identified the problem. I adapted our
application and now, all is ok.
Thanks for your help and your suggestions.
Regards,
Christophe
Le 18/12/12 10:02, « Christophe Rahier » christo...@qualifio.com a écrit
:
Hi Cyril,
Behind haproxy, I have 3 IIS
/NOSRV
-1/-1/-1/-1/39 400 210 - - CR-- 0/0/0/0/0 0/0 {} BADREQ
Dec 14 14:25:15 lbhatest haproxy[1758]: 212.123.23.228:9164
[14/Dec/2012:14:25:15.447] Managers-Farm~ Managers-Farm/NOSRV
-1/-1/-1/-1/18 400 210 - - CR-- 0/0/0/0/0 0/0 {} BADREQ
Does it help you?
I'm not sure those logs concern your
14:25:15 lbhatest haproxy[1758]: 212.123.23.228:9164
[14/Dec/2012:14:25:15.447] Managers-Farm~ Managers-Farm/NOSRV
-1/-1/-1/-1/18 400 210 - - CR-- 0/0/0/0/0 0/0 {} BADREQ
Does it help you?
Thanks for your help.
Christophe
Le 12/12/12 14:33, « Baptiste » bed...@gmail.com a écrit :
Enable
key_andcert.pem.
I use the same haproxy for our application (managers / players) with 2
different official IP.
When I try to access to my Players, no problem.
When I try to access to my Managers, Chrome returns the error: too
many
redirects.
Please find below my config file.
Thanks for your help
-Original Message-
From: Willy Tarreau
Sent: Wednesday, December 05, 2012 8:13 AM
To: David Touzeau
Cc: haproxy@formilux.org
Subject: Re: NTLM/Issues With HaProxy to SQUID need help...
Hi David,
[ your MUA still emits those Ctrl-M at the end of each line ]
On Tue, Dec 04, 2012
On 5 December 2012 12:47, David Touzeau da...@articatech.com wrote:
Thanks Willy for this clarification but if i turn to tunnel mode,did i lose
the x-forwarded-for HTTP header ?
Yes, on all but the first request I believe.
Jonathan
--
Jonathan Matthews // Oxford, London, UK
HI all
I have 3 Squid servers connected to my Active Directory (about 1500 users)
I have setup HaProxy to balance connections from users to the 3 squid servers
in order to go Internet.
When connecting browsers trough HaProxy:
Hi David,
[ your MUA still emits those Ctrl-M at the end of each line ]
On Tue, Dec 04, 2012 at 11:09:09PM +0100, David Touzeau wrote:
HI all
I have 3 Squid servers connected to my Active Directory (about 1500 users)
I have setup HaProxy to balance connections from users to the 3 squid
On 22 November 2012 22:14, Owen Marinas omari...@woozworld.com wrote:
option httpchk POST /db/data/ext/feed/graphdb/userFeed
HTTP/1.1\r\nContent-Type: application/json\r\nContent-Length:
35\r\n{userId:8, offset:0, limit:1}\r\n
It might not be related to your original question, but I think
Thx for the advice Jonathan
Willy's advice from an old post was to make it work with printf+nc in
bash first. So I did.
the issue is after I added the lines to the backend(below), the server
still resported UP eben if the expected string is not there.
regards
Owen
---
On 23 November 2012 17:10, Owen Marinas omari...@woozworld.com wrote:
Thx for the advice Jonathan
Willy's advice from an old post was to make it work with printf+nc in bash
first. So I did.
I think your back-end may be being lenient, then :-)
the issue is after I added the lines to the
I hate myself for this
my production LB is running haproxy-1.4.15-1 but the Staging haproxy-1.4.8-1
after upgrade its all working now, the POST, and http-check expect
works fine.
thx all
Owen
On 12-11-23 12:50 PM, Jonathan Matthews wrote:
On 23 November 2012 17:10, Owen Marinas
On Fri, Nov 23, 2012 at 01:28:38PM -0500, Owen Marinas wrote:
I hate myself for this
my production LB is running haproxy-1.4.15-1 but the Staging haproxy-1.4.8-1
after upgrade its all working now, the POST, and http-check expect
works fine.
Good reason indeed. BTW, keep in mind that even
Hi Benoit,
On Tue, Nov 06, 2012 at 03:16:27PM +0100, Benoit GEORGELIN (web4all) wrote:
Hi everybody ,
I try to figured out and understand more the information in haproxy web
interface regarding :
Current conns
Queue
Session Rate
Sessions
Because I have a problem on my
don't know if the requester wants :
- to find a way to enable transparent proxy in the pfsense kernel
- to find a way to enable transparent proxy in haproxy
- to get some help troubleshooting a config involving transparent proxy
- anything else ?
and i said also the exact way to do it. I
Good morning people,
since yesterday i have an existing problem that i can't solve without any help..
Topology:
pfsense (Reverse+transparent proxy (haproxy), Load Balancer (of pfsense), SSL
termination (stunnel))
after pfsense i have 2 web servers that pfsense load balance them.
Here
Hi,
Are you sure pfsense kernel has been compiled with TPROXY enabled?
cheers
On Fri, Aug 24, 2012 at 9:09 AM, hapr...@serverphorums.com wrote:
Good morning people,
since yesterday i have an existing problem that i can't solve without any
help..
Topology:
pfsense (Reverse+transparent
Hi Baptiste,
It's a VM and generally i don't think that it needs compile with transparent
proxy enabled in the packages of pfsense there is haproxy and haproxy supports
transparency.
Regards,
---
posted at http://www.serverphorums.com
Yeah, the all thing is not this. The transparent proxy is the last thing i want
to know.
---
posted at http://www.serverphorums.com
http://www.serverphorums.com/read.php?10,552462,552500#msg-552500
so please clarify your question cause I don't understand anything and
I'm not the only one.
cheers
On Fri, Aug 24, 2012 at 10:27 AM, hapr...@serverphorums.com wrote:
Yeah, the all thing is not this. The transparent proxy is the last thing i
want to know.
---
posted at
I said it very clearly, that i have found how to make it transparent, and i
said also the exact way to do it. I want help with the set up of the reverse
proxy.
This...
Regards,
---
posted at http://www.serverphorums.com
http://www.serverphorums.com/read.php?10,552462,552583#msg-552583
On Fri, Aug 24, 2012 at 1:15 PM, hapr...@serverphorums.com wrote:
I said it very clearly, that i have found how to make it transparent,
No you didn't... But maybe my english understanding is too bad :)
and i said also the exact way to do it. I want help with the set up of the
reverse proxy
Yes and i am asking how to set up haproxy to works as a reverse proxy. Because
haproxy can do load balance too.
Regards,
---
posted at http://www.serverphorums.com
http://www.serverphorums.com/read.php?10,552462,552625#msg-552625
when
servers go UP and DOWN, and why.
This will also probably help us to know what happens.
Done. That helps - we tend to be a bit minimal on most logging for compliance
reasons but that's certainly going to help.
From this previous log line, it looks like something becomes slow (your
I'm having some trouble interpreting an HAProxy log file line - it doesn't seem
to make much sense to me, so I'm fairly certain that I'm reading it
incorrectly. My full configuration file is at the end of this email.
Symptomatically, I've been seeing situations in which people are briefly
in the frontend), you'll see
when servers go UP and DOWN, and why.
This will also probably help us to know what happens.
From the user's experience, the system hung waiting for a response
for some 40 seconds and then showed a login screen, which was served
when the incorrect backend received a page
On Wed, Jul 11, 2012 at 07:03:52AM +0200, Baptiste wrote:
Hey,
Depends at which phase of the health check Chrome maintains the
connection opened, you can give a try to HAProxy's content inspection:
listen https
mode tcp
balance roundrobin
acl clienthello
Thanks for all the replies Willy, Baptiste and Lukas.
Unfortunately we could not get the tcp content trick to work. Our guess
is Chrome preconnect actually does a SSL handshake and so HAProxy does not
have a choice and has to engage a Apache worker. We used the following
==
listen https
Sorry for the confusing config that I gave. I actually meant
==
listen https 0.0.0.0:44 http://0.0.0.0:4445/3
mode tcp
balance roundrobin
acl clienthello req_ssl_hello_type 1
# use tcp content accepts to detects ssl client and server hello.
tcp-request
apache threads because you have an event based proxy in front of
it (even if it is on the same box).
Date: Wed, 11 Jul 2012 07:15:19 +0530
Subject: Help with Chrome preconnects
From: vikram.naya...@gmail.com
To: haproxy@formilux.org
hi,
I am using
/passive LB setup and I have multiple domains and applications
behind the setup. I am hoping you can help me see if something is possible.
I have a rule that states that www.somedomain.com gets forwarded to farm X. I
have another rule that states that staging.somedomain.com gets routed to farm
be able to help?
Kind Regards
Brent Clark
Hi,
I assume you have configured LVS in NAT mode, so it's normal your
servers can't reach the VIP.
Please have a look at this page:
http://blog.exceliance.fr/2011/07/22/layer-4-load-balancing-nat-mode/
In your case, the client will be in the same
Christensen (JEDC)
Cc: haproxy@formilux.org
Subject: Re: Help with ACL
Hi Jens,
No need to apologies, you may have helped a few other people ;)
You can also do this:
acl acl_myip src 1.1.1.1
acl acl_collector path_beg -f /etc/haproxy/collector_patterns.lst
acl acl_collector hdr_sub(Referer
Hi Jens,
You can setup 2 ACLs, one with IPs one with your header and use them
on the use_backend line:
acl myip src 1.1.1.1 1.1.1.2
acl myheader hdr(MyHeader) keyword
use_backend acl_collector myip || myheader
Note that the use_backend order matters.
The first matching will be used. So
if the traffic was comming from
1.1.1.1.
Regards,
Jens Dueholm Christensen
From: Baptiste [bed...@gmail.com]
Sent: 21 March 2012 22:02
To: Jens Dueholm Christensen (JEDC)
Cc: haproxy@formilux.org
Subject: Re: Help with ACL
Hi Jens,
You can setup 2 ACLs, one
:32
To: haproxy@formilux.org
Subject: RE: Help with ACL
Hi Baptiste
I can see I forgot to add some more information to my previous mail..
Existing functionality (ie. ACLs and sorting into backends) and traffic must
not be changed.
There is a lot of traffic to other parts of the system (ie
.. :)
Regards,
Jens Dueholm Christensen
From: Jens Dueholm Christensen (JEDC) [jens.dueh...@r-m.com]
Sent: 21 March 2012 23:32
To: haproxy@formilux.org
Subject: RE: Help with ACL
Hi Baptiste
I can see I forgot to add some more information to my previous
Hi Randy,
On Sun, Mar 04, 2012 at 05:11:30PM -0500, Randy Shults wrote:
I must be configuring something incorrectly, but I dont know what, because
I've seen response times increase by 200ms with haproxy than on Nginx.
200ms typically sounds like a TCP delayed ACK issue.
Could you please test
Like this?
frontend all 0.0.0.0:80 http://0.0.0.0/
log global
maxconn 1
option http-server-close
no option tcp-smart-accept
timeout client 4000
default_backend psb
acl is_psb path_beg /psb
acl is_crossdomain path_beg /crossdomain
acl is_stats path_beg
Hi,
I would have suggest playing with the option tcp-smart-connect or
no option tcp-smart-connect on the backend side, since the response
time you observe is on the server side.
As Willy mentionned, it would be interesting to get a capture of a
single curl request passing through the haproxy box,
-length or missing last chunk).
As Willy mentionned, it would be interesting to get a capture of a
single curl request passing through the haproxy box, using the -i
any flag as well to get incoming and outgoing traffic.
Yes, this would definitely help.
Willy
Hi Randy,
with the information you sent, I finally managed to reproduce the issue here.
At first glance it seems to happen when expect: 100-continue is used. I can
also confirm that using option http-no-delay works around the issue. I am
investigating to get a fix ASAP, as for me this looks like
OK, I managed to reproduce it and to find the cause. It was a side effect
of an optimization of the chunked-encoding mode which was globally applied
instead of being applied only to chunked-encoded data. With chunks, we always
have to see the last empty chunk so we can decide to enable TCP delayed
Thanks for the response.
The stats were lagging actually, we determined that the bottleneck was
before HAproxy (it ended up being the IPS in front of the network)
However, our linux guy suggested the following sysctl changes to enhance
throughput which i will share here:
net.ipv4.tcp_tw_reuse =
Hi Steve,
On Tue, Jan 24, 2012 at 08:55:15AM -0800, Steve V wrote:
Good morning,
Much love for haproxy and many thanks to all who have worked on and
contributed to it. We have been using it for several years without issue.
However, we have been doing load testing lately and there appears
Hi Steve,
Are you using Vsĥere 4 or above?
Since you're using option httpclose, I recommand you to move to
roundrobin load-balancing algorithm.
Actually, HTTP connections to the servers may be very short, so
leastconn is not appropriate there and rr will provide a better
balancing.
Would it be
Good morning,
Much love for haproxy and many thanks to all who have worked on and
contributed to it. We have been using it for several years without issue.
However, we have been doing load testing lately and there appears to be a
bottleneck. It may not even have to do with haproxy (i dont think
Hi
Both curl and wget are your friend.
cheers
On Mon, Jan 23, 2012 at 5:20 PM, S Ahmed sahmed1...@gmail.com wrote:
What command line tool can I use to see if haproxy is working as I expect.
I am setting up redirects for specific url combinations, some are http get
and others are http post
Could this be related to the number of concurrent connections being run?
maxconn 1024 under global seems quite low, and if your servers are
holding connections open due to responding slowly could this be the cause?
Chris
On 13/01/2012 03:37, John Lauro wrote:
If the refused connection
:31 ERROR - jmeter.protocol.http.sampler.HTTPJavaImpl: Cause:
java.net.ConnectException: Connection refused
Do you know which configuration I should use to make HAProxy not drop any
request and am i verifying it correctly too?
Thanks for your help in advance.
Manisha
, January 12, 2012 5:03 PM
To: haproxy@formilux.org
Subject: Need help with HAProxy
I am using HAProxy on RedHat 5.5 and have below configuration.
global
daemon
maxconn 1024
log 127.0.0.1 local1 info
defaults
log global
balance roundrobin
mode http
retries3
option
Hi Sean,
On Fri, Jan 06, 2012 at 02:16:44PM -0500, Sean Patronis wrote:
Well, I think I figured it out. Though I am not sure it is the most
efficient way.
first I created a match acl in the frontend:
acl is_apps_match url_dir apps
then in the backend, i created a rewrite:
reqrep
to
apps.domain.com/AnyAppHere, basically stripping the apps from the URL
before passing it.
What would be the best way to compose this ACL? Thanks for the help.
--Sean
--
--Sean Patronis
Auto Data Direct Inc.
850.877.8804
/app/AnyAppHere will be proxied to
apps.domain.com/AnyAppHere, basically stripping the apps from the
URL before passing it.
What would be the best way to compose this ACL? Thanks for the help.
--Sean
On Wed, Jan 04, 2012 at 07:39:23PM +0530, Ravi Ranjan wrote:
Hi,
Thanks for your guidance.
I am using stunnel too, but still its failing.
failing is not a useful term to describe your issues ! What are you
observing ? Are you sure that your servers *really* send the Location
header you're
Hi All,
Please can some one help me on setting rewrite rule for haproxy ssl.
I tried a lot but it fails.
Here is the config:
listen example_ssl 0.0.0.0:1443
mode http
balance roundrobin
option ssl-hello-chk
reqadd X-Is-Secure-Request:True
option
+Support.
With Warm Regards
Ravi Ranjan
On Wed, Jan 4, 2012 at 3:58 PM, Ravi Ranjan rran...@apigee.com wrote:
Hi All,
Please can some one help me on setting rewrite rule for haproxy ssl.
I tried a lot but it fails.
Here is the config:
listen example_ssl 0.0.0.0:1443
mode
message
+Support.
With Warm Regards
Ravi Ranjan
On Wed, Jan 4, 2012 at 3:58 PM, Ravi Ranjan rran...@apigee.com wrote:
Hi All,
Please can some one help me on setting rewrite rule for haproxy ssl.
I tried a lot but it fails.
Here is the config:
listen example_ssl 0.0.0.0
, 2012 at 11:28 AM, Ravi Ranjan rran...@apigee.com wrote:
Hi All,
Please can some one help me on setting rewrite rule for haproxy ssl.
I tried a lot but it fails.
Here is the config:
listen example_ssl 0.0.0.0:1443
mode http
balance roundrobin
option ssl-hello-chk
, so HAProxy
can't manipulate it.
You must use stunnel or stud or pound in front of HAProxy in order to
decrypt traffic.
Then, your rewrite rule might work.
cheers
On Wed, Jan 4, 2012 at 11:28 AM, Ravi Ranjan rran...@apigee.com wrote:
Hi All,
Please can some one help me on setting
Hi All,
I'm stuck with a url rewriting. It appears that it didn't rewrite at all, I
didn't find where is the mistake, so please help :)
The goal is to rrewrite from http://www.arpa.emr.it/bologna/geamappa to
This is the part of the config:
frontend http-in
bind *:80
mode http
Solved! Here it is:
backend boappsrv
mode http
option forwardfor
option httpclose
reqirep ^([^\ ]*)\ /bologna/geamappa(.*) \1\ \2
server bo-appsrv bo-appsrv4-bo.arpa.emr.net:8080 maxconn 50
TY All,
Rune
problem for me and it's essential that I can have the
right IP address.
How can I do, is it possible? I've heard of stunnel but I don't
understand how to use it.
Thank you in advance for your help,
you must use
http://www.stunnel.org/static/stunnel.html
protocol = proxy
in stunnel and use
Hi Aleks,
Thanks for your help, I received your answer yesterday but it was too late
for answering, I was too tired :-)
I'll check what you proposed.
Thanks once again,
Christophe
Le 04/11/11 09:41, « Aleksandar Lazic » al-hapr...@none.at a écrit :
Hi Christophe,
On 03.11.2011 22:00
On Fri, 04 Nov 2011 09:41:00 +0100, Aleksandar Lazic wrote:
you must use
http://www.stunnel.org/static/stunnel.html
protocol = proxy
In this case, you need the latest stunnel (4.45).
understand how to use it.
Thank you in advance for your help,
Christophe
box. Or you have to configure PBR on your
network.
Stunnel can be used in front of HAProxy to uncrypt the traffic.
But if your main issue is to get the client IP, then it won't help you
unless you setup transparent mode as explained above.
cheers
On Thu, Nov 3, 2011 at 10:00 PM, Christophe Rahier
path_beg
-i/result_aaa
use_backend cs_aaa_caipiaos_1 if acl_dom_caipiao.aaa.com
acl_url_result
then I can access caipiao.aaa.com/result_aaa directly, So there should be a
problem on reqrep
Strange then.
Could you help to analyze the root cause
Is it set correctly
I only see 503/404 error on haproxy log, I already set debug level ! version
1.4.14
I really need your help
My Skype account : derek.liao66
Date: Sat, 24 Sep 2011 12:43:35 +0200
From: w...@1wt.eu
To: y...@hotmail.com
CC: haproxy@formilux.org
Subject: Re: Need help
On Sat, Sep 24, 2011 at 10:46:23AM +, DerekLiao wrote:
Is it set correctly
It does not indicate what's in it. What do you mean by correctly ?
I only see 503/404 error on haproxy log, I already set debug level ! version
1.4.14
503s indicate that sometimes there is no server to connect
health check is normal, I checked from haproxy monitor screen ,
How to check reqrep is working fine or not ? I double the URI has not been
replaced
Date: Sat, 24 Sep 2011 12:52:01 +0200
From: w...@1wt.eu
To: y...@hotmail.com
CC: haproxy@formilux.org
Subject: Re: Need help about reqrep
On Sat, Sep 24, 2011 at 11:06:07AM +, DerekLiao wrote:
health check is normal, I checked from haproxy monitor screen ,
OK, maybe it's your server which is returning 503 then.
How to check reqrep is working fine or not ?
That's what I explained, in apache's logs.
I double the URI has
is it possible to get detail rewrite infomation like apache error log does?
tcpdump, little bit diffcult ,too much taffice need to analyse
From: luky...@hotmail.com
To: y...@hotmail.com; w...@1wt.eu
CC: haproxy@formilux.org
Subject: RE: Need help about reqrep (urgent)
Date: Sat, 24 Sep 2011 13
On Sat, Sep 24, 2011 at 11:23:07AM +, DerekLiao wrote:
is it possible to get detail rewrite infomation like apache error log does?
No, what haproxy logs is what it *receives*. That's why we're asking
for what is seen on the other side.
tcpdump, little bit diffcult ,too much taffice need
works as expected
From: cyril.bo...@free.fr
To: y...@hotmail.com
CC: haproxy@formilux.org; w...@1wt.eu
Subject: Re: Need help about reqrep (urgent)
Date: Sat, 24 Sep 2011 14:35:25 +0200
Hi all,
Le Samedi 24 Septembre 2011 12:43:35 Willy Tarreau a écrit :
Hi,
On Fri, Sep 23, 2011
To: cyril.bo...@free.fr
CC: haproxy@formilux.org; w...@1wt.eu
Subject: RE: Need help about reqrep (urgent)
Date: Sat, 24 Sep 2011 15:01:33 +
configuration files:
reqrep ^([^\ ]*)\ /kaijiang([/\?\ ].*)\1\ /result_aaa\
reqirep ^Host: Host:\ www.bbb.com
Logs:
srv_aaa_caipiaos_01 0/0/0
401 - 500 of 544 matches
Mail list logo
