Re: Help tracking "connection refused" under pressure on v2.9

Hi Willy, On Fri, 29 Mar 2024 07:17:56 +0100 Willy Tarreau wrote: > > These "connection refused" is from our watchdog; but the effects are as > > perceptible from the outside. When our watchdog hits this situation, > > it will forcefully restart HAProxy (we have 2 instances) because there > >

Re: Help tracking "connection refused" under pressure on v2.9

Hi Ricardo, On Thu, Mar 28, 2024 at 06:21:16PM -0300, Ricardo Nabinger Sanchez wrote: > Hi Willy, > > On Thu, 28 Mar 2024 04:37:11 +0100 > Willy Tarreau wrote: > > > Thanks guys! So there seems to be an annoying bug. However I'm not sure > > how this is related to your "connection refused",

Re: Help tracking "connection refused" under pressure on v2.9

Hi Willy, On Thu, 28 Mar 2024 04:37:11 +0100 Willy Tarreau wrote: > Thanks guys! So there seems to be an annoying bug. However I'm not sure > how this is related to your "connection refused", except if you try to > connect at the moment the process crashes and restarts, of course. I'm > seeing

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, Mar 27, 2024 at 02:26:47PM -0300, Ricardo Nabinger Sanchez wrote: > On Wed, 27 Mar 2024 11:06:39 -0300 > Felipe Wilhelms Damasio wrote: > > > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 > > sp:7fd7c002f100 error:0 in haproxy[42c000+1f7000] > > We managed to get a core

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, 27 Mar 2024 11:06:39 -0300 Felipe Wilhelms Damasio wrote: > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 > sp:7fd7c002f100 error:0 in haproxy[42c000+1f7000] We managed to get a core file, and so created ticket #2508 (https://github.com/haproxy/haproxy/issues/2508) with

Re: Help tracking "connection refused" under pressure on v2.9

On Wed, 27 Mar 2024 11:06:39 -0300 Felipe Wilhelms Damasio wrote: > kernel: traps: haproxy[2057993] trap invalid opcode ip:5b3e26 sp:7fd7c002f100 > error:0 in haproxy[42c000+1f7000] In our build, this would be where instruction pointer was: (gdb) list *0x5b10e6 0x5b10e6 is in __task_queue

Re: Help tracking "connection refused" under pressure on v2.9

Hi, We've confirmed a few findings after we poured ~75-80Gbps of traffic on purpose on a single machine: - haproxy does indeed crashes; - hence, we have no stats socket to collect a few things; It seems that under pressure (not sure which conditions yet) the kernel seems to be killing it. dmesg

Re: Help with peer setup and "srv_conn(bk_customer/haproxy-dest1)"

Hi. Anyone which can help to protect the backen with backend states? Regards Alex On 05.12.21 11:42, Aleksandar Lazic wrote: Hi. I try to protect an backend server against a overload within a master/master setup. The test setup looks like this lb1: 8081 \    -hap-dest: 8080 lb2:

Re: Help

[mailto:emerson.go...@gmail.com] *Sent:* 7 de julho de 2021 12:34 *To:* Anilton Silva Fernandes *Cc:* haproxy@formilux.org *Subject:* Re: Help Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also, make sure

RE: Help

: Emerson Gomes [mailto:emerson.go...@gmail.com] Sent: 7 de julho de 2021 12:34 To: Anilton Silva Fernandes Cc: haproxy@formilux.org Subject: Re: Help Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also,

Re: Help

Hello Anilton, In the "bind *:443" line, do not specify a PEM file directly, but only the directory where your PEM file(s) resides. Also, make sure that both the certificate and private key are contained within the same PEM file. It should look like this: -BEGIN CERTIFICATE- xxx

Re: Help

On 7/7/2021 6:45 AM, Anilton Silva Fernandes wrote: Hi there. Can I get some help from you. I’m configuring HAProxy as a frontend on HTTPS with centified and I want clients to be redirect to BACKEND on HTTPS as well (443) but I want clients to see only HAProxy certificate, as the backend

Re: help for implementation of first fetch function "sample_fetch_json_string"

Tim, you are great ;-) On 08.04.21 18:14, Tim Düsterhus wrote: Aleks, On 4/8/21 5:07 PM, Aleksandar Lazic wrote: http-request set-var(sess.json) %[req.hdr(Authorization),b64dec,json_string("\$.kubernetes\\.io/serviceaccount/namespace")] http-request set-var() does not expect the %[]

Re: help for implementation of first fetch function "sample_fetch_json_string"

Aleks, On 4/8/21 5:07 PM, Aleksandar Lazic wrote: http-request set-var(sess.json) %[req.hdr(Authorization),b64dec,json_string("\$.kubernetes\\.io/serviceaccount/namespace")] http-request set-var() does not expect the %[] syntax, because it always takes a sample. Even the following returns

Re: [HELP] slim is being set to 1

Hi. On 07.01.20 07:27, Shah, Aman wrote: Hello all, We have an haproxy server and we are getting some odd values. Value of slim is coming as 1 for most of the domains. The value is nowhere being set and maxconn is being set to 2000. Can you please help me to figure out what could be the

Re: Re: Help, URL does not work with CHINESE charactor?

Hi! On Tue, Dec 24, 2019 at 07:59:25PM +0800, JWD wrote: > It works with "option accept-invalid-http-request". > Thanks a lot. > > Yes, it does not work with IE only. > Other web browser is fine. I already noticed this behaviour with very old versions of IE in the past, it would do this on

Re: Re: Help, URL does not work with CHINESE charactor?

It works with "option accept-invalid-http-request". Thanks a lot. Yes, it does not work with IE only. Other web browser is fine. JWD From: Lukas Tribus Date: 2019-12-24 19:31 To: JWD CC: Aleksandar Lazic; haproxy Subject: Re: Re: Help, URL does not work with CHINESE charactor? On T

Re: Re: Help, URL does not work with CHINESE charactor?

On Tue, 24 Dec 2019 at 11:46, JWD wrote: > > I have tried version 1.7,1.8,2.0,2.1, all the same. > > Config: > frontend www > acl acl-app hdr(host) -i sharepoint.domain.com > use_backend app if acl-app > backend > cookie HA-Server insert indirect nocache > server app

Re: Re: Help, URL does not work with CHINESE charactor?

Egif; Ribbo 00529+ n.Document=973830|-1|0|-533254637\r\n 00564 \r\n JWD From: Aleksandar Lazic Date: 2019-12-24 17:08 To: JWD; haproxy Subject: Re: Help, URL does not work with CHINESE charactor? Hi JWD. On 24.12.19 02:53, JWD wrote: > Hi,all > I have a backend, which is sharepo

Re: Help, URL does not work with CHINESE charactor?

Hi JWD. On 24.12.19 02:53, JWD wrote: Hi,all I have a backend, which is sharepoint website. If URL include CHINESE charactor, it return HTTP 400 ERROR from IE 11 with haproxy. But it is ok without haproxy. Can anyone help me? Thanks. This can not access, return HTTP 400 ERROR:

RE: Help required ehhe

Objet : Re: Help required ehhe Am 23-08-2019 02:04, schrieb andy.anthoine@opt.nc: > REALLY SORRY ABOUT THAT lo > > I'll copy paste my bad :D > > admin@sld-loadb-01-prd-cit:~$ curl -v -o /dev/null --max-time 5 > --http1.0 http://10.154.2.29:8080/iws/ curl -v -o /dev/n

Re: Help required ehhe

EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 01:43, schrieb andy.anthoine@opt.nc: Hi, I can't launch the command from the LB I love screenshots! It's so easy to copy paste from them 8-/ do you have any other tool which you can use to check if the co

RE: Help required ehhe

sage d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 10:57 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 01:43, schrieb andy.anthoine@opt.nc: > Hi, > > I can't launch the command f

Re: Help required ehhe

@none.at] Envoyé : vendredi 23 août 2019 10:33 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Am 23-08-2019 00:49, schrieb andy.anthoine@opt.nc: Hi, Ehhe not an external ip don't worry, or i would have deleted it hehe No change, the problem seems t

RE: Help required ehhe

um);});}}});} var $cwCurrentCss = '/css/ui_common.css' isc.setAutoDraw(false); * Closing connection 2 Best regards Andy -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 10:33 À : ANTHOINE Andy (EXT) Cc : haproxy@form

Re: Help required ehhe

mode http [snip more config] -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 09:41 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.org Objet : Re: Help required ehhe Hi. Am 23-08-2019 00:28, schrieb andy.anthoine@opt.nc: Hi, I got

RE: Help required ehhe

rvers left. 62 sessions active, 0 requeued, 0 remaining in queue. What do you mean by that ? > mode http [snip more config] -Message d'origine- De : Aleksandar Lazic [mailto:al-hapr...@none.at] Envoyé : vendredi 23 août 2019 09:41 À : ANTHOINE Andy (EXT) Cc : haproxy@formilux.o

Re: Help required ehhe

Hi. Am 23-08-2019 00:28, schrieb andy.anthoine@opt.nc: Hi, I got that email on this site, not sure if it's still working etc https://www.slideshare.net/haproxytech/haproxy-best-practice I'm having some issue with a service (white page sometimes for a webservice), and i m not totally sure

Re: Help with 1.8.1/4 and spoa_server/spoa_example

Hi Christopher. Am 05.07.2019 um 16:29 schrieb Christopher Faulet: > Le 03/07/2019 à 16:16, Aleksandar Lazic a écrit : >> I know this is a old haproxy version but I have not the option to update as >> it's >> part of a vendor product. >> >> I need to bring the `[haproxy-2.0.git]/

Re: Help with 1.8.1/4 and spoa_server/spoa_example

Le 03/07/2019 à 16:16, Aleksandar Lazic a écrit : I know this is a old haproxy version but I have not the option to update as it's part of a vendor product. I need to bring the `[haproxy-2.0.git]/ contrib/spoa_server/` up and runnig or `[haproxy-1.8.git]/contrib/spoa_example/` from 1.8.4 to be

Re: Help you generate more revenue for your haproxy.com.

On Wed, Sep 05, 2018 at 10:14:55PM +1000, Rob Thomas wrote: > You gotta wonder how this guy got this mailing list. He must have actually > LOOKED at the website, right? > > Sigh. Spammers. > > For anyone who cares, I don't think it's possible for haproxy to get MORE > exposure on google. > >

Re: Help with backend server sni setup

Hi. On 30/07/2018 16:39, Lukas Tribus wrote: On Mon, 30 Jul 2018 at 13:30, Aleksandar Lazic wrote: Hi. I have the following Setup. APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP The external HAProxy is configured with multiple TLS Vhost. Never use SNI for Vhosting. It should

Re: Help with backend server sni setup

On Mon, 30 Jul 2018 at 13:30, Aleksandar Lazic wrote: > > Hi. > > I have the following Setup. > > APP -> Internal Haproxy -(HTTPS)-> external HAProxy -> APP > > The external HAProxy is configured with multiple TLS Vhost. Never use SNI for Vhosting. It should work with the host header only. SNI

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 05:44:44PM +0100, Jonathan Matthews wrote: > No. Sudo doesn't pass envvars through to its children by default: > https://stackoverflow.com/questions/8633461/how-to-keep-environment-variables-when-using-sudo > > Read that page *and* the comments - in particular be aware

Re: Help with environment variables in config

No. Sudo doesn't pass envvars through to its children by default: https://stackoverflow.com/questions/8633461/how-to-keep-environment-variables-when-using-sudo Read that page *and* the comments - in particular be aware that you have to request (at the CLI) that sudo preserve envvars, and you also

Re: Help with environment variables in config

actually, looking at this now I realize my sudo is messing it up. I need to set the env variables for the su environment. Yeah it works now. Thanks for helping me get to that conclusion. On Sat, Jul 21, 2018 at 10:31 AM jdtommy wrote: > would this chain of calls not work? > >

Re: Help with environment variables in config

would this chain of calls not work? ubuntu@ip-172-31-30-4:~$ export GRAPH_ADDRESS=graph.server.com ubuntu@ip-172-31-30-4:~$ export GRAPH_PORT=8182 ubuntu@ip-172-31-30-4:~$ sudo haproxy -d -V -f /etc/haproxy/haproxy.cfg On Sat, Jul 21, 2018 at 3:26 AM Igor Cicimov wrote: > On Sat, Jul 21, 2018

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 7:12 PM, Jonathan Matthews wrote: > On Sat, 21 Jul 2018 at 09:12, jdtommy wrote: > >> I am setting them before I start haproxy in the terminal. I tried both >> starting it as a service and starting directly, but neither worked. It >> still would not forward it along. >>

Re: Help with environment variables in config

On Sat, 21 Jul 2018 at 09:12, jdtommy wrote: > I am setting them before I start haproxy in the terminal. I tried both > starting it as a service and starting directly, but neither worked. It > still would not forward it along. > Make sure that, as well as setting them, you're *exporting* the

Re: Help with environment variables in config

I am setting them before I start haproxy in the terminal. I tried both starting it as a service and starting directly, but neither worked. It still would not forward it along. On Sat, Jul 21, 2018, 2:06 AM Igor Cicimov wrote: > > > On Sat, Jul 21, 2018 at 4:49 PM, jdtommy wrote: > >> here is

Re: Help with environment variables in config

On Sat, Jul 21, 2018 at 4:49 PM, jdtommy wrote: > here is my simple `listen` section of the haproxy config file: > > listen graph_front >bind *:8182 >mode tcp >server graph_server graph.server.com:8182 > > this works just fine, but I need the address and port to be a

Re: help for setting up haproxy using Linux system proxy

I had faced the same issue and have documented my solution at https://www.mail-archive.com/haproxy@formilux.org/msg26387.html Regards, Vivek On Sat, Jul 8, 2017 at 5:44 AM, Aaron West wrote: > On 8 July 2017 at 11:25, Aaron West wrote: >> for me

Re: help for configuration between http and tcp mode

Hi, > > Because your Host header is certainly "influxdb-drp.example.net:8086", not > "influxdb-drp.example.net". You can verify this with this acl instead : > acl host_influxdb-drp.example.net hdr(host) -i influxdb-drp.example.net:8086 > > Or you can even capture the header in your logs, it's

Re: help for configuration between http and tcp mode

Hi, Le 09/07/2017 à 17:58, M a écrit : Hi, It seems the error is related to acl and I don’t yet understand why > [...] frontend https_influxdb bind 192.168.246.17:8086 ssl crt /data/ssl_certs no-sslv3 ciphers

Re: help for configuration between http and tcp mode

Hi, It seems the error is related to acl and I don’t yet understand why. I have done additional tests with configuration: ——— frontend https bind 0.0.0.0:443 ssl crt /data/ssl_certs no-sslv3 ciphers

Re: help for configuration between http and tcp mode

Hello M Looking at your configuration you are trying to use HTTPS/TCP/SSL Connection for HTTP frontend https_influxdb bind 192.168.246.17:8086 ssl crt /data/ssl_certs no-sslv3 ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:

Re: help for setting up haproxy using Linux system proxy

On 8 July 2017 at 11:25, Aaron West wrote: > for me at least, it would > boggle the mind that you have a reverse proxy using a forward proxy. I think I I should clarify the above... I don't mean using forward proxies as a real server(Think webfilters) because that makes

Re: help for setting up haproxy using Linux system proxy

I'm going to go out on a limb here and say that you can't(Or shouldn't just in case somehow you can...), first, for me at least, it would boggle the mind that you have a reverse proxy using a forward proxy. I guess you could use a transparent proxy although I'm still not sure why but HAproxy

Re: Help Needed || haproxy limiting the connection rate per user

Greetings, On 08/30/2016 01:10 PM, Samrat Roy wrote: Thank you sir for your quick reply. I am now able to give custom error code for my HAproxy configuration. However I am facing one more issue . With the above approach HAproxy is rejecting each and every calls once the limit has crossed.

Re: Help Needed || haproxy limiting the connection rate per user

Thank you sir for your quick reply. I am now able to give custom error code for my HAproxy configuration. However I am facing one more issue . With the above approach HAproxy is rejecting each and every calls once the limit has crossed. It is behaving as a circuit breaker . But my requirement is

Re: Help Needed || haproxy limiting the connection rate per user

Greetings, On 08/26/2016 09:14 AM, Samrat Roy wrote: Hello Sir, down votefavorite I am trying to achieve rate limiting using HAProxy. I am trying to follow the "Limiting the

Re: Help

Hi, It supports it, just need the right version: http://blog.haproxy.com/haproxy/proxy-protocol/ Baptiste On Tue, Aug 2, 2016 at 11:59 PM, Jeff Palmer wrote: > OK, then you'll need to enable the PROXY protocol in exim assuming it > supports the protocol. > > > > On Tue,

Re: Help

Hi, Le 02/08/2016 à 23:21, Grégory MARCASSIN - Magic a écrit : Hi, Sorry to ask you something that I can probably find on the internet. :$ But I do not find clearly what I wish. Thank you in advance for your help. I wish to inform exim to support haproxy check: $ Telnet VIP 25 Trying

Re: Help

It s true but i want the real IP of the client so i need this option. Le 02/08/2016 à 23:37, Jeff Palmer a écrit : I'm not familiar with exim itself, but unless it supports the PROXY protocol, you should probably remove the "send-proxy" part of your bk_postfix backend. On Tue, Aug 2,

Re: Help

I'm not familiar with exim itself, but unless it supports the PROXY protocol, you should probably remove the "send-proxy" part of your bk_postfix backend. On Tue, Aug 2, 2016 at 5:21 PM, Grégory MARCASSIN - Magic < gmarcas...@magic.fr> wrote: > Hi, > > Sorry to ask you something that I can

Re: Help

Hi, Sorry to ask you something that I can probably find on the internet. :$ But I do not find clearly what I wish. Thank you in advance for your help. I wish to inform exim to support haproxy check: $ Telnet VIP 25 Trying 192.168.56.50 ... Connected to vip. Escape character is '^]'. 554 SMTP

Re: Help

What specifically are you having issues with, and what are the configurations you have already tried? Just asking someone to do your job for you isn't likely to get a lot of replies. On Tue, Aug 2, 2016 at 4:36 PM, Grégory MARCASSIN - Magic wrote: > Hi, > Sorry to ask

Re: Help! HAProxy randomly failing health checks!

ptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! Ok! Here is a bunch of info that might be

Re: Help! HAProxy randomly failing health checks!

ompasscorporation.com>> Date: Wednesday, March 16, 2016 at 5:01 PM To: Zachary Punches <zpunc...@getcake.com<mailto:zpunc...@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>"

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 10:47 AM, Igor Cicimov < ig...@encompasscorporation.com> wrote: > > > On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches > wrote: > >> I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 >> routing. If one of the proxy boxes fails

Re: Help! HAProxy randomly failing health checks!

ume we would go down all the time > yeah? > > From: Igor Cicimov <ig...@encompasscorporation.com> > Date: Wednesday, March 16, 2016 at 4:50 PM > To: Zachary Punches <zpunc...@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < > hapro

Re: Help! HAProxy randomly failing health checks!

.@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing healt

Re: Help! HAProxy randomly failing health checks!

03]: 66.87.151.25:3325 > [17/Mar/2016:18:37:06.938] shared_incoming shared_incoming/ > -1/-1/-1/-1/0 400 0 - - CR-- 312/312/0/0/0 0/0 "" > Mar 17 18:37:45 localhost haproxy[28703]: 108.59.8.48:33611 > [17/Mar/2016:18:36:55.938] shared_incoming provedmedia/provedmedia_http > 279/

Re: Help! HAProxy randomly failing health checks!

icimov <ig...@encompasscorporation.com> >> Date: Wednesday, March 16, 2016 at 5:01 PM >> To: Zachary Punches <zpunc...@getcake.com> >> Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < >> haproxy@formilux.org> >> Subject: Re: Help! HA

Re: Help! HAProxy randomly failing health checks!

t; >> From: Igor Cicimov <ig...@encompasscorporation.com> >> Date: Thursday, March 17, 2016 at 4:18 PM >> To: Zachary Punches <zpunc...@getcake.com> >> Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < >> haproxy@formilux.org>

Re: Help! HAProxy randomly failing health checks!

:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! So is port 1027 used for health checks over SSL or not? I don't see any ssl settings on that port.

Re: Help! HAProxy randomly failing health checks!

I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 checks done a second) then Route53 changes its routing from the first proxy box to the second On 3/15/16, 9:46 PM, "Baptiste"

Re: Help! HAProxy randomly failing health checks!

..@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilux.org" < > haproxy@formilux.org> > Subject: Re: Help! HAProxy randomly failing health checks! > > So is port 1027 used for health checks over SSL or not? I don't see any > ssl settings on that

Re: Help! HAProxy randomly failing health checks!

day, March 16, 2016 at 5:01 PM To: Zachary Punches <zpunc...@getcake.com<mailto:zpunc...@getcake.com>> Cc: Baptiste <bed...@gmail.com<mailto:bed...@gmail.com>>, "haproxy@formilux.org<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@for

Re: Help! HAProxy randomly failing health checks!

roxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Thu, Mar 17, 2016 at 10:47 AM, Igor Cicimov <ig...@encompasscorporation.com<mailto:ig...@encompasscorporation.com>> wrote: On Thu, Mar 17, 2016 at 5:29 AM, Zac

Re: Help! HAProxy randomly failing health checks!

96 > > What would lowering the tune.ssl.default-dh-param to 1024 do? > From: Igor Cicimov <ig...@encompasscorporation.com> > Date: Wednesday, March 16, 2016 at 5:01 PM > To: Zachary Punches <zpunc...@getcake.com> > Cc: Baptiste <bed...@gmail.com>, "haproxy@formilu

Re: Help! HAProxy randomly failing health checks!

On Thu, Mar 17, 2016 at 5:29 AM, Zachary Punches wrote: > I’m not, these guys aren’t sitting behind an ELB. They sit behind route53 > routing. If one of the proxy boxes fails 3 checks in 30 seconds (with 4 > checks done a second) then Route53 changes its routing from the

Re: Help! HAProxy randomly failing health checks!

g<mailto:haproxy@formilux.org>" <haproxy@formilux.org<mailto:haproxy@formilux.org>> Subject: Re: Help! HAProxy randomly failing health checks! On Fri, Mar 18, 2016 at 1:38 PM, Igor Cicimov <ig...@encompasscorporation.com<mailto:ig...@encompasscorporation.com>> wrote

Re: Help! HAProxy randomly failing health checks!

Has ELB changed its IP address??? Maybe you're checking a third party VM :) Baptiste

Re: Help! HAProxy randomly failing health checks!

On Wed, Mar 16, 2016 at 5:54 AM, Zachary Punches wrote: > Hello! > > > > My name is Zack, and I have been in the middle of an on going HAProxy > issue that has me scratching my head. > > > > Here is the setup: > > > > Our setup is hosted by amazon, and our HAProxy (1.6.3)

Re: Help! HAProxy randomly failing health checks!

Greetings, On 03/15/2016 02:54 PM, Zachary Punches wrote: Hello! My name is Zack, and I have been in the middle of an on going HAProxy issue that has me scratching my head. Here is the setup: Our setup is hosted by amazon, and our HAProxy (1.6.3) boxes are in each region in 3 regions. We

Re: Help haproxy

Yes, i have just the option that's make gone right. It's just the option as you know. Regards, Mathieu 2015-02-05 10:03 GMT+01:00 Yuan Long yuan.l...@chinanetcloud.com: Do you have the words option forward for in your config.

Re: Help haproxy

Maybe that is why the clinet ipaddress is forwarded. What is your webserver (ngix/apache) software and what is the logformat configuration in it. Regards, Long Wu Yuan 龙 武 缘 Sr. Linux Engineer 高级工程师 ChinaNetCloud

Re: Help haproxy

Do you have the words option forward for in your config. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20forwardfor Can you copy/paste your config (without sensitive info if needed). Regards, Long

Re: Help haproxy

2015-02-02 16:45 GMT+01:00 Sander Klein roe...@roedie.nl: The only other thing that I can think of is that your client is behind a proxy server which adds the X-Forward-For header for you... Or you got something strange in your config... Sander You're totally right. My client have a proxy

Re: Help haproxy

On 02.02.2015 12:09, Mathieu Sergent wrote: Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option source ip usesrc but you need to be root. If you want to not be root, you have

Re: Help haproxy

Hi, On Mon, Feb 02, Sander Klein wrote: On 02.02.2015 12:09, Mathieu Sergent wrote: Hi, I try to set up a load balancing with HAProxy and 3 web servers. I want to receive on my web servers the address' client. I read that it is possible with the option source ip usesrc but you need to

Re: Help haproxy

Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i found my client's address. But this is really

Re: Help haproxy

Hi Mathieu, Pleas keep the list in the CC. On 02.02.2015 15:26, Mathieu Sergent wrote: Thanks for your reply. I just used the option forwardfor in the haproxy configuration. And i can find client's address from my web server (with tcpdump). But if i don't use the option forwardfor, the web

Re: Help haproxy

On 02.02.2015 16:33, Mathieu Sergent wrote: Hi Sander, Yes i reloaded the haproxy and my web server too. But no change. And i'm not using proxy protocol. To give you more precisions, on my web server i used tcpdump functions which give me back the header of the requete http. And in this i

RE: help!

Ok, I wll compose an email and write to haproxy@formilux.org ? Yes, on every mail, including your responses to me (at least in CC). And please drop your if you have received this email in error signature when your a posting, that just looks silly since your mail is public anyway.

RE: help!

Hi Matthew, I have some basic queries on setting haproxy up for a novice! Just read the documentation and ask here. Are you aware of any good support forums out there?  No forum, this mailing list is the proper way to ask for help/advice/support haproxy. There is also an irc channel,

Re: Help with dynamic backend selection

- Original Message - From: Willy Tarreau w...@1wt.eu To: Rajat Chopra rcho...@redhat.com Cc: haproxy haproxy@formilux.org Sent: Saturday, May 10, 2014 12:01:14 AM Subject: Re: Help with dynamic backend selection On Sat, May 10, 2014 at 07:58:25AM +0200, Willy Tarreau wrote

Re: Help with dynamic backend selection

On Sat, May 10, 2014 at 07:58:25AM +0200, Willy Tarreau wrote: May I ask about the ETA on this? It's too early for me to know, I need to go down deep into the ebtrees first to see if longest match is compatible with strings storage-wise, then I need to study how patterns are built as

Re: Help with dynamic backend selection

Hi Rajat, On Tue, May 06, 2014 at 07:34:34PM -0400, Rajat Chopra wrote: Hi! The new feature to dynamically select a backend has been going great for me. I use it like this and it all works like a charm : use_backend bk_%[hdr(host),host_to_backend.mapfile] if TRUE Now I need help

Re: Help with dynamic backend selection

- Original Message - From: Willy Tarreau w...@1wt.eu To: Rajat Chopra rcho...@redhat.com Cc: haproxy haproxy@formilux.org Sent: Friday, May 9, 2014 10:43:32 AM Subject: Re: Help with dynamic backend selection Hi Rajat, On Tue, May 06, 2014 at 07:34:34PM -0400, Rajat Chopra

Re: Help with dynamic backend selection

Hi Rajat, On Fri, May 09, 2014 at 02:13:47PM -0400, Rajat Chopra wrote: Why don't you run that based on ACLs if you're certain that service2 will not cause any trouble ? Eg: use_backend bk_%[hdr(host),host_to_backend.mapfile]_%[path] if { path_beg /service2 }

Re: Help with dynamic backend selection

Wonder if we could use some pluggable logic for map. e.g. User can provide a .so with the user defined map function. So my call will become : It's still early to do this, there are strict types on the patterns and their own alloc/release/insert/delete functions. use_backend

Re: Help with dynamic backend selection

On Fri, May 09, 2014 at 07:54:33PM -0400, Rajat Chopra wrote: No that much. I'm thinking about something. Maps can retrieve the first matching prefix using map_beg. So if you pass base to your map, you'll have the host+path on input, and take the first matching prefix. Thus, it will give

RE: [Help] How can I use haproxy with ssl

Hi, My Linux is [...] Description: CentOS release 5.10 (Final) [...] and Installed openssl-1.0.1e Please decide now: would you like to use the openssl from your repository or do you want to build it on your own? There is no point in troubleshooting 2 different problems at the same time.

RE: [Help] How can I use haproxy with ssl

Hi, but my web server use https (ssl)so load-balancer have to provide this. download the haproxy-1.5-dev21and make this.but... error... src/shctx.o: In function `atomic_dec': /root/haproxy-1.5-dev21/src/shctx.c:134: undefined reference to `__sync_sub_and_fetch_4' src/shctx.o: In function

RE: help with long connect times and timeout

Hi Ricardo, I'm using the current defaults and added this to the config:  Can you post the full configuration? The part about timeouts is important in this case. Also, please specify what release you are using. However once I startup haproxy, and I attempt to connect to the proxy from

RE: Help with kQueue

Hi Fred, #proxy/haproxy -V -d -f /proxy/lr.cfg -n 8192 Available polling systems : select : pref=150, test result OK kqueue : disabled, test result OK poll : disabled, test result OK  Total: 3 (1 usable), will use select.  Using select() as the polling mechanism.  Does it work if you

RE: Help with kQueue

# /proxy/haproxy -vv -c -f l2cr.cfg Available polling systems : kqueue : pref=300,  test result OK #proxy/haproxy -V -d -f /proxy/lr.cfg -n 8192 Available polling systems : select : pref=150,  test result OK You are comparing two different configurations, are you sure non of them

Re: Help with cleaning up our error log output and request error counts

On 12/27/2012 1:53 AM, Willy Tarreau wrote: On Wed, Dec 26, 2012 at 07:03:02PM -0500, Brendon Colby wrote: I was thinking that this is just standard browser behavior too. IE also does this - it just seems to open fewer connections. This is why I was confused and thought I was missing something,

  1   2   >