Re: redirect POST to GET?

2014-10-22 Thread Willy Tarreau
Hi Paul, On Tue, Oct 21, 2014 at 03:23:55PM -0700, Paul McIntire wrote: Hi We have a very specific use case where we want to redirect a POST to /facebook-canvas to a GET request for /index.html Is this even possible? How can I do it? Yes, you need to redirect using code 303, which the

Re: URL Encoding Problem BADREQ umlaut

2014-10-22 Thread Willy Tarreau
Hi, On Tue, Oct 21, 2014 at 02:50:58PM +0200, Robert Bartl wrote: yep. that worked around the broken URL. BTW. this behaviour started with Copy Pasting a URL with an umlaut into Internet explorer. We've already had some cases where users had to use the option to accept invalid requests

Re: Possible causes for termination state LR

2014-10-22 Thread Willy Tarreau
Hi Colin, On Tue, Oct 21, 2014 at 04:36:25PM -0500, Colin Ingarfield wrote: On 10/21/2014 03:59 PM, Cyril Bonté wrote: Hi Colin, Le 21/10/2014 22:05, Colin Ingarfield a écrit : Hello, Please help me understand this output in the haproxy log file: Oct 21 14:53:17 host haproxy[4526]:

Re: Possible causes for termination state LR

2014-10-22 Thread Cyril Bonté
Hi Willy, Le 22/10/2014 09:08, Willy Tarreau a écrit : Could you please check in your log if you find other requests from the same IP:port ? I'm wondering if we can't have something like this in the case of keep-alive when a prior request was sent to stats for example (in which case we'd have

Re: Possible causes for termination state LR

2014-10-22 Thread Willy Tarreau
Hi Cyril, On Wed, Oct 22, 2014 at 09:28:39AM +0200, Cyril Bonté wrote: Hi Willy, Le 22/10/2014 09:08, Willy Tarreau a écrit : Could you please check in your log if you find other requests from the same IP:port ? I'm wondering if we can't have something like this in the case of keep-alive

ssl client certificate forwarding

2014-10-22 Thread Rein Remmel
Hi, I’m wondering if there are any plans to support passing client certificate to the backend? Currently most of the certificate fields can be forwarded as headers, but I couldn’t find a way to froward the certificate itself. What I need is something similar to apache RequestHeader set

Re: ssl client certificate forwarding

2014-10-22 Thread Jarno Huuskonen
Hi, On Wed, Oct 22, Rein Remmel wrote: Hi, I’m wondering if there are any plans to support passing client certificate to the backend? Currently most of the certificate fields can be forwarded as headers, but I couldn’t find a way to froward the certificate itself. What I need is

Re: ssl client certificate forwarding

2014-10-22 Thread Rein Remmel
Hi Jarno, Thanks for a prompt reply! It seems to work for me too, although there were some line offsets when applying to version 1.5.6. Any idea what would it take to get it merged? I’ll try to understand what the patch does, but I’m afraid my knowledge of c and ssl is not sufficient to

Experiment with an anti-spam on the list

2014-10-22 Thread Willy Tarreau
Hi all, I said that some time ago I had plans for testing a non-intrusive anti-spam solution. So here's what we're doing now. All e-mails to formilux.org pass through haproxy.com's anti-spam filters and are then rerouted to the mailing list server. That way we're performing an external cleanup

Re: Experiment with an anti-spam on the list

2014-10-22 Thread Aleksandar Lazic
Hi Willy. [exceptionally top post] Many thanks to you and all involved Peoples for your effort to remove the spam from this list. Best regards, Aleks Am 22-10-2014 20:01, schrieb Willy Tarreau: Hi all, I said that some time ago I had plans for testing a non-intrusive anti-spam solution. So

Fastsocket and Haproxy

2014-10-22 Thread Arnall
Hi everyone, do you know this project : https://github.com/fastos/fastsocket Currently Fastsocket is implemented in the Linux kernel(kernel-2.6.32-431.17.1.el6) of CentOS-6.5. According to our evaluations, Fastsocket increases throughput of Nginx and Haproxy(measured by connections per

[PATCH] BUG/MINOR: log: fix request flags when keep-alive is enabled

2014-10-22 Thread Cyril Bonté
Colin Ingarfield reported some unexplainable flags in the logs. For example, a LR termination state was set on a request which was forwarded to a server, where LR means that the request should have been handled internally by haproxy. This case happens when at least client side keep-alive is

Re: Possible causes for termination state LR

2014-10-22 Thread Cyril Bonté
Hi all, Le 22/10/2014 10:30, Willy Tarreau a écrit : I wonder if the flags shouldn't be cleaned up more than it is in http_end_txn_clean_session(), but I'm not sure and didn't have time to check this yesterday. Something like : s-flags = ~(SN_ERR_MASK | SN_FINST_MASK); Absolutely, it ought

Re: [PATCH] BUG/MINOR: log: fix request flags when keep-alive is enabled

2014-10-22 Thread Willy Tarreau
On Wed, Oct 22, 2014 at 10:30:13PM +0200, Cyril Bonté wrote: Colin Ingarfield reported some unexplainable flags in the logs. For example, a LR termination state was set on a request which was forwarded to a server, where LR means that the request should have been handled internally by haproxy.

DNS

2014-10-22 Thread Jon Hoffart
Hello, I am doing some experimenting with HAproxy an balancing one of our mail servers. I was wondering if there is any way to have HAproxy do a reverse DNS as the mail log always shows the client ip as the server in which HAproxy is installed and not the IP of the client were the mail

Re: Experiment with an anti-spam on the list

2014-10-22 Thread Morgan Aldridge
On Wed, Oct 22, 2014 at 2:06 PM, Aleksandar Lazic al-hapr...@none.at wrote: Many thanks to you and all involved Peoples for your effort to remove the spam from this list. I second the thanks for putting in time to improve the quality of this list. Thanks! -- Morgan ---

Re: DNS

2014-10-22 Thread Bryan Talbot
On Wed, Oct 22, 2014 at 1:50 PM, Jon Hoffart jon.hoff...@medoraco.com wrote: Hello, I am doing some experimenting with HAproxy an balancing one of our mail servers. I was wondering if there is any way to have HAproxy do a reverse DNS as the mail log always shows the client ip as the

Re: Fastsocket and Haproxy

2014-10-22 Thread Willy Tarreau
Hi Arnall, On Wed, Oct 22, 2014 at 09:35:04PM +0200, Arnall wrote: Hi everyone, do you know this project : https://github.com/fastos/fastsocket I just got the link forwarded to me today. (...) Willy have you tried it ? Not yet. But I've read the code :-) The patch is quite small. It