On Fri, Jan 16, 2009 at 02:48:18PM +, Malcolm Turnbull wrote:
The manual states that when using balance source:
The source IP address is hashed and divided by the total
weight of the running servers to designate which server will
receive the request. This ensures that the
On Mon, Jan 19, 2009 at 10:16:46PM +0100, Jordi Espasa wrote:
Jordi's question got me thinking. Does haproxy support externally
scripted healthchecks? If not, this would be useful for implementing a
variety of healthchecks that aren't built into haproxy.
Yes. It would be a very cool feature.
On Mon, Jan 19, 2009 at 06:11:13PM -0800, Hsin, Chih-fan wrote:
Hi, I am new to HAProxy and have questions about the configuration and
I downloaded HAProxy 220.127.116.11 from
http://haproxy.1wt.eu/blocked::http://haproxy.1wt.eu/ to /home/user/Tool
Unpacked it by tar
On Tue, Jan 20, 2009 at 07:43:25PM +0800, Unai Rodriguez wrote:
How about writing a bash script that checks LDAP status somehow and have
this script managed by xinetd?
The script should return HTTP/1.1 200 OK\r\n if the LDAP server is
fine or something else if not (e.g. HTTP/1.1 503
On Wed, Jan 21, 2009 at 12:44:53PM -0500, Dave Pascoe wrote:
Long-time haproxy user...first time poster. Finally ran into a rewrite
issue I just haven't been able to solve. Seems like it ought to be simple.
Problem: Need to rewrite requests like /foo/favicon.ico and to just
On Wed, Jan 21, 2009 at 12:13:35PM +0100, Martin Karbon wrote:
I am relatively new to this great software and I am having problems
with the feature stats socket. it won't write the haproxy.stat file no
matter what. so I cannot run the socat.
r...@lb1:~# echo show stat |
On Wed, Jan 21, 2009 at 06:53:16PM +0530, vaibhav pol wrote:
I am using ajaxterm service on loadbalncer where i setup haproxy and i
want to balance this web terminal service which running on the 8022 port
when client wants to connect to the this service it has to redirect to one
On Wed, Jan 21, 2009 at 09:43:58PM +0100, Martin Karbon wrote:
Quoting Willy Tarreau w...@1wt.eu:
Hi Willy, thanks for the fast reply
On Wed, Jan 21, 2009 at 12:13:35PM +0100, Martin Karbon wrote:
I am relatively new to this great software and I am having problems
On Sun, Jan 25, 2009 at 11:23:24AM -0500, John Marrett wrote:
I'm embarassed to report that this is not an HAProxy issue.
Don't feel embarassed. I'm glad that you found the issue. And it's
kind to send us an update.
In addition to the changes being made on the load balancing level,
On Fri, Jan 23, 2009 at 07:21:08PM -0500, Joseph Hardeman wrote:
Here is a question I am hoping someone has either seen before or has a
suggestion for me.
For the first time since we put haproxy in months ago, the primary
haproxy we have did not respond in 10
On Thu, Jan 22, 2009 at 02:30:55PM -0500, Jill Rochelle wrote:
I'm just getting started with all this; I thought I had this working
last year, but having issues now.
When using stunnel and xforwardfor with haproxy, is the URL suppose to
stay https or will it change to http? If
On Sun, Jan 25, 2009 at 07:06:23PM -0500, John Marrett wrote:
No problem, no time wasted yet !
Well, none of your time :) It took me far longer than it should have to
realise my error. Regretable, packet captures are usually my first
diagnostic tool. A mistake I won't make again
On Mon, Jan 26, 2009 at 09:28:48PM -0800, Joe Williams wrote:
I am attempting to load balance based off of the type of request (POST,
PUT, DELETE, GET, etc). Sending GETs to all backend servers and POST,
DELETE and PUT to only one. From the documentation it looks like this
On Tue, Jan 27, 2009 at 12:13:04PM +1100, Dylan Egan wrote:
I want to understand the process a bit more to clarify whether or not
a retry should be occurring in this situation. Essentially I have a
pretty standard haproxy setup and it has 7 backend servers. Now when a
On Tue, Jan 27, 2009 at 07:25:02AM -0500, John Lauro wrote:
You must enable syslog to listen via IP (default is socket only). On
centos/redhat, modify /etc/sysconfig/syslog to include -r option, such as:
SYSLOGD_OPTIONS=-m 0 -r
We'll have to add this one to the future FAQ BTW, as it's one
On Fri, Feb 13, 2009 at 08:04:50AM -0500, John Lauro wrote:
It wouldn't hurt to put RHEL 5 or Centos 5 on the box instead of FC. FC is
generally meant for desktops instead of servers.
A customer has encountered a similar issue a few times on RHEL3. We
noticed there was swap on the
On Sat, Feb 14, 2009 at 10:19:33AM -0500, Luke Melia wrote:
On Fri, Feb 13, 2009 at 09:30:18PM +0100, Willy Tarreau wrote:
Wow. That's pretty strange. I don't see any possibility for haproxy
to do something like this, especially at the beginning of the data.
But I can't imagine how nor why
On Thu, Feb 19, 2009 at 11:04:21AM -0800, Valentino Volonghi wrote:
-BEGIN PGP SIGNED MESSAGE-
Hi, I've been trying to use haproxy 18.104.22.168 in front of a couple of
erlang mochiweb servers in EC2.
The server alone can deal with about 3000 req/sec and
On Thu, Feb 19, 2009 at 10:02:36AM +0100, Matthias Müller wrote:
I'm trying to find a suitable solution to load balance Rails applications
via Passenger and HAProxy.Currentliy I'm doing a lot of testing using
The setting is as simple as follows:
On Sat, Feb 14, 2009 at 10:53:11PM +0100, vmware vmware wrote:
I am trying to read the information (show info, show stat) from the socket
of haproxy with a perl script in order to get a similar result when using
the socat command. The problem is that I am not able to read
On Thu, Feb 19, 2009 at 03:59:54PM -0800, Valentino Volonghi wrote:
Could you check net.ipv4.tcp_tw_reuse, and set it to 1 if it's zero ?
It probably was set to 0... This fix and the change of tcp_mem to the
standard values (which are created dynamically depending on the
On Fri, Feb 20, 2009 at 11:56:53AM +0100, Maria wrote:
I don't have a lot of experience in perl to. As Nagios allows also to do
this via bash or c, I can also use this. My main goal is only to read
this information with a language (supported by nagios) and send
On Tue, Feb 24, 2009 at 07:43:53PM +0300, Ahmad Al-Ibrahim wrote:
I'm using HAProxy in the frontend as a reverse proxy to backend servers,
I'm thinking of possible ways to protect backend servers from being
How effective is doing url redirect to protect against these
On Mon, Feb 23, 2009 at 12:12:43PM -0800, Michael Fortson wrote:
Feb 23 18:50:22 www haproxy: 22.214.171.124:45025
[23/Feb/2009:18:50:21.939] webservers fast_mongrels/NOSRV
0/101/-1/-1/101 503 212 - - sQ-- 322/309/9/0/0 0/1 GET
sQ The session spent
On Thu, Feb 26, 2009 at 11:45:31AM +, Malcolm Turnbull wrote:
I'm using haproxy-126.96.36.199.tar.gz for some testing and looking at the
options to bind multiple ports.
The docs imply that you can use a line such as:
listen VIP_Name :80,:81,:8080-8089
But this gives me :
On Mon, Mar 02, 2009 at 08:07:08PM +0800, FinalBSD wrote:
Yes Alexander, actually I wrote this by XML and compiled by DocBook
SGML here just means Docbook :), LaTeX is really the best for wrtting
docs, but it's also complicated and need much to write.
On Mon, Mar 02, 2009 at 08:19:22PM +0800, FinalBSD wrote:
I'm not sure it's a bug in the snapshot(ss-20090207 and ss-20090223), but
I really cannot get the right reponse
when I use the monitor-net option like following:
On Tue, Mar 03, 2009 at 03:17:43PM +0800, Sun Yijiang wrote:
I've been testing HAProxy for two days, it runs very well. However, I
noticed that during the last 4 hours, with total 520K sessions, the number
of frontend request errors (row Frontend, column Errors/Req
On Thu, Mar 05, 2009 at 08:45:20AM -0500, Allen, Thomas wrote:
The thing is that if I don't include the health check, the load balancer
works fine and each server receives equal distribution. I have no idea why
the servers would be reported as down but still work when
On Wed, Mar 04, 2009 at 12:12:21AM +0100, Alexander Staubo wrote:
On Tue, Mar 3, 2009 at 11:44 PM, Martin Karbon martin.kar...@asbz.it wrote:
just wanted to know if anyone knows an opensource solution for a so called
transparent failover: what I mean with that is, I installed two machines
On Fri, Mar 06, 2009 at 11:23:02AM -0800, Michael Fortson wrote:
On Fri, Mar 6, 2009 at 8:43 AM, Willy Tarreau w...@1wt.eu wrote:
On Thu, Mar 05, 2009 at 01:04:06PM -0800, Michael Fortson wrote:
I'm trying to understand why our proxied requests have a much greater
On Fri, Mar 06, 2009 at 11:49:39AM -0800, Michael Fortson wrote:
Oops, looks like it's actually Gb - Gb:
ah nice !
Here's a netstat -s:
Oh there are interesting things there :
- 513607 failed connection attempts
= let's assume it was
On Fri, Mar 06, 2009 at 01:00:38PM -0800, Michael Fortson wrote:
Thanks Willy -- here's the sysctl -a |grep ^net output:
after a quick check, I see two major things :
- net.ipv4.tcp_max_syn_backlog = 1024
= far too low, increase it to 10240 and check if it helps
On Fri, Mar 06, 2009 at 03:54:13PM -0500, Greg Gard wrote:
hi willy and all,
wondering if i can expect haproxy to queue requests when max conn per
backend it set to 1. running nginx haproxy mongrel/rails2.2.2.
yes, it works fine and is even the recommended way of setting it for
On Fri, Mar 06, 2009 at 04:55:21PM -0500, Timothy Olson wrote:
I'm using HAProxy 188.8.131.52 to load-balance three Tomcat instances, and to
fork requests for static content to a single Apache instance. I've found
that after the initial HTML page is loaded from Tomcat, the browser's
On Fri, Mar 06, 2009 at 02:36:59PM -0800, Michael Fortson wrote:
On Fri, Mar 6, 2009 at 1:46 PM, Willy Tarreau w...@1wt.eu wrote:
On Fri, Mar 06, 2009 at 01:00:38PM -0800, Michael Fortson wrote:
Thanks Willy -- here's the sysctl -a |grep ^net output:
On Fri, Mar 06, 2009 at 11:47:14PM +0100, Alexander Staubo wrote:
On Fri, Mar 6, 2009 at 7:48 PM, Willy Tarreau w...@1wt.eu wrote:
When it comes to just move an IP address between two machines an do
nothing else, the VRRP protocol is really better. It's what is
implemented in keepalived
On Sat, Mar 07, 2009 at 12:14:44AM +0100, Alexander Staubo wrote:
On Sat, Mar 7, 2009 at 12:07 AM, Willy Tarreau w...@1wt.eu wrote:
A less ambitious scheme would have the new proxy take over the client
connection and retry the request with the next available backend.
Will not work because
On Fri, Mar 06, 2009 at 10:02:03PM -0500, Greg Gard wrote:
thanks for taking a look willy. let me know if there's anything else i
# option httpclose
This one above should not be commented out. Otherwise, client doing keepalive
On Sat, Mar 07, 2009 at 07:03:15PM +0800, Jeffrey 'jf' Lim wrote:
Woohoo!! :) thanks, Willy, for the work. Seems like a really great
list of stuff there.
Especially love the HTTP invalid request and response captures per
frontend/backend feature - I would definitely love to be able
as there were a bunch of pending fixes, I have released 184.108.40.206 and 220.127.116.11.
The big bug was found and fixed by Krzysztof, it involved server state
tracking which could become extremely inefficient with large numbers of
servers because of a typo. Some user-visible fixes include the
Yes, this is it! 1.3.16-rc1. After almost 11 months of development!
There are new features I often forget about after being used to them in
the dev tree, but fortunately there are people who remind me those were
not in 1.3.15 when I suggest them to use those ;-)
I may forget a lot of
On Sun, Mar 08, 2009 at 10:13:04PM -0400, Jeffrey Buchbinder wrote:
I have attached a copy of the NSLU2 armv5b build (.ipk package) for the
If it doesn't attach properly, it's also available at:
just replying quick, as I'm in a hurry.
On Mon, Mar 09, 2009 at 04:01:29PM -0400, Allen, Thomas wrote:
That, along with specifying HTTP1.1, did it, so thanks! What should I
load into Host: ? It seems to work fine with www, but I'd prefer to
use something I understand. Please keep
On Mon, Mar 09, 2009 at 04:15:34PM -0400, Allen, Thomas wrote:
I used the unit 'S' for my timeouts, as in
Is that to be avoided? I assumed it meant seconds.
OK it's just a minor problem. You have to use a lower-case s : 60s.
It's stupid that
On Mon, Mar 09, 2009 at 05:20:49PM -0400, Allen, Thomas wrote:
Hm, changing to 60s for each gave me 100% 504 errors, I removed all
three. Bad idea, I know, but at least it works then.
then use 6, that's the old way of doing it :-)
I'm running 1.2.18 because the
On Mon, Mar 09, 2009 at 01:13:31PM +0100, Krzysztof Oledzki wrote:
First, please excuse that it took me nearly one moth to replay to your
letter, shame on me. :(
no problem, I know we're all facing the same issues trying to find time :-)
In fact, I think that
On Tue, Mar 17, 2009 at 09:26:43PM +0100, Jan-Frode Myklebust wrote:
Here's an selinux policy for haproxy. The patch is built and lightly
tested with haproxy-18.104.22.168-1.fc10.i386 on Fedora9, and haproxy-1.2.18
believe it or not, I've never experimented at all with selinux.
On Thu, Mar 19, 2009 at 11:14:48PM -0700, James Satterfield wrote:
I just recently upgraded my LBs to 22.214.171.124 from 1.2.something and
noticed those stats. I was wondering about them as well. In my setup
those numbers only seem to differ where I'm using cookies for
On Thu, Mar 19, 2009 at 11:42:31AM +, Malcolm Turnbull wrote:
Possibly a stupid question but:
Can Haproxy work as a TCP-multiplexer i.e. combine requests into one
connection to a server?
Or would that be related to using keep-alive?
It requires that we get keep-alive to work
now that's it for real. 1.3.16 is out. And with it, I'm declaring
1.3 as the new stable branch. That means that only fixes and minor
feature enhancements may be merged in future 1.3 versions.
New development will take place in 1.4 or maybe 2.0, I'll see.
Anyway I'd like to adopt a new
On Wed, Mar 25, 2009 at 12:57:41PM -0400, Allen, Thomas wrote:
We now have HAProxy running over our freshly released website:
thanks for the heads up !
Thanks for this great piece of software and all the help! Only two
On Thu, Mar 26, 2009 at 03:45:53PM +0100, Jan-Frode Myklebust wrote:
And here's the patch that does everything I want to do to the
specfile... Sorry about the noise.
Thanks for your work on this. I have no way to test that the specfiles
work, and I only update a few fields in
I've released 1.3.17 which fixes the high CPU usage. Bart Bobrowski
helped me a lot tracking this bug that I could not reproduce here.
It was caused by a timeout being re-armed just after a socket is
On Fri, Mar 27, 2009 at 01:09:30PM +0100, Remco Verhoef wrote:
We're experiencing strange behaviour of haproxy-126.96.36.199 and haproxy-1.3.16,
at frequent times it will use 100% cpu. It appears that it is wait_time is
not used. I've used both poll and epoll, same behaviour. The
On Sun, Mar 29, 2009 at 07:46:05PM +0200, benoit wrote:
Jeffrey 'jf' Lim a écrit :
On Wed, Mar 25, 2009 at 8:02 PM, Benoit maver...@maverick.eu.org wrote:
diff -ru haproxy-188.8.131.52/doc/configuration.txt
On Sun, Mar 29, 2009 at 12:31:27PM -0700, John L. Singleton wrote:
I'm a little mystified as to the usefulness of this as well. I mean,
what does hashing the domain name solve that just balancing back to a
bunch of Apache instances with virtual hosting turned on doesn't? Are
On Sun, Mar 29, 2009 at 10:17:39PM +0200, benoit wrote:
BTW Benoit, be careful, you left some fprintf() in your patch.
Heck yes, i'll have to check on this thanks.
Btw, why isn't this list set with a default reply to the list ?
Because I hate it when
On Sun, Mar 29, 2009 at 09:06:40PM -0700, Eric Schwab wrote:
We would like to use x-client with the SMTP protocol with haproxy, as a
means to pass along some basic data to the backend SMTP servers. We
looked into this a month or two ago and Willy mentioned that this would
On Tue, Mar 31, 2009 at 10:57:26AM +0800, Jeffrey 'jf' Lim wrote:
On Tue, Mar 31, 2009 at 5:06 AM, Willy Tarreau w...@1wt.eu wrote:
Now that the storm of horror stories has gone with release of 1.3.17,
I'd like to explain what I'm planning to do for future versions of
On Wed, Apr 01, 2009 at 12:57:36PM +0300, John Doe wrote:
I am perplexed as HAproxy 184.108.40.206 doesn't recognise the 'redirect' keyword.
And it's right because 220.127.116.11 does not have it. This was
implemented in 1.3.16 (use 1.3.17 instead, 1.3.16 is buggy).
Also, be careful, there's a small
On Thu, Apr 02, 2009 at 02:23:44PM +0800, Jeffrey 'jf' Lim wrote:
Ok perhaps combinatorial was not the word that i should have used,
but... I hope you can see the point/s with the explanation that i
gave. The head acl only gets checked once - thereafter which it goes
On Fri, Apr 03, 2009 at 01:37:53PM +0800, Jeffrey 'jf' Lim wrote:
OK. Just so that I get an idea, how many use_backend rules (and how many
backends) do you have in a large config ? I'm asking because I want to be
able to support ACL files and rules files, and the way to implement them
On Fri, Apr 03, 2009 at 10:29:32PM -0300, Nicolas Cohen wrote:
i want to use haproxy to load balance a virtual world app we are
developing in java,
the app server benefits if most connected users in one particular
machine are in the same regions of the virtual world
On Sat, Apr 04, 2009 at 10:20:23AM +0800, Jeffrey 'jf' Lim wrote:
OK maybe use is OK in fact, considering the alternatives.
:) some proposals for the keywords:
(cond/use seems the best compromise - short, but understandable enough)
what would you
On Sat, Apr 04, 2009 at 11:43:38AM -0300, Nicolas Cohen wrote:
It seems right to implement it.
I'll review this with the team and let you know once we have an
On Sat, Apr 04, 2009 at 07:46:28PM +0400, Alexey wrote:
I saw post about delaying incoming smtp connections via haproxy. Looks like I
need transparent proxy for saving source ip addresses, but it requires TPROXY
in linux kernel.
yes it does.
I need to patch kernel + iptables
On Mon, Apr 06, 2009 at 03:50:13PM -0300, Mariano Cortesi wrote:
I'm trying to optimize my haproxy and servers configuration, but I'm
having problem when I want to understand what's failing or limiting
I'm using autobench with httperf to generate up to 3000 to
On Tue, Apr 07, 2009 at 11:05:16AM +0300, John Doe wrote:
For some reason
acl stunnel src 10.0.0.0/8 doesn't seem to work (with version
That's not expected at all. Are you sure you were not mixing up with
problem ? Could you please retest with 1.3.17 ?
On Sat, Apr 04, 2009 at 11:18:06PM -0700, Will Buckner wrote:
I'm trying to find a solution to a problem I'm having This might be
a unique use case, but the why is a bit complicated so I'll just leave
that out of the picture for now.
I would like to make a maximum of
On Tue, Apr 07, 2009 at 12:34:37PM -0400, Jill Rochelle wrote:
I have a unique, maybe not unique, situation.
The flow is like this
In on apache 80 haproxy on 85 to find servers server is tomcat
server but port is which goes back to apache then apache uses
mod_jk to forward to
On Tue, Apr 07, 2009 at 02:58:27PM -0700, Karl Pietri wrote:
Hey all I'm trying to use Acls to have a priority queue of servers for a
special ip/port and fail over to the regular section and i'm wondering if
its possible to have an acl that would check if dst_conn gt nbsrv(backend);
On Fri, Apr 17, 2009 at 04:29:11AM +0200, Maik Broemme wrote:
attached is a patch which adds a new option to HAProxy called 'inject'
for the mode 'tcp'. In the current version of this patch you can only
add data at the beginning of the session. I think this is very useful -
I've wanted to redo those benchmarks at 10 Gbps for quite some time now,
in fact since the release of 1.3.16 which brought splicing support and the
new I/O layer. Now I found a few hours to re-run them, the results have
been posted here :
On Fri, Apr 17, 2009 at 06:53:21PM +0200, Maik Broemme wrote:
okay attached is now the final version, there were no new features or
enhancements. I only renamed it from 'X-Original-Dst' to 'X-Original-To'
because it is a common practice to name it so. For example Postfix does
it in a
On Fri, Apr 17, 2009 at 04:47:38PM +0100, Michael Miller wrote:
I am doing some intial testing with HAProxy and have come across a
problem I don't seem to be able to resolve.
A summary of what I am initially trying to achieve follows. I am trying
to use HAProxy to provide
On Sun, Apr 19, 2009 at 10:56:29PM +0100, Robert Simmons wrote:
I am trying to configure HAProxy to use connection splicing, however
1.3.17 does not seem to accept this option. I've tried splice-auto
along with request and response without success. According to the
On Sun, Apr 19, 2009 at 09:25:19PM -0700, Arash Ferdowsi wrote:
another piece of (potentially useful) information is that the I have
haproxy load balancing to 3 different machines with appservers (one of
them being the same machine running haproxy). the corruption only
occured when balancing
On Mon, Apr 20, 2009 at 10:02:44AM +0100, Malcolm Turnbull wrote:
I've played around with using an old mkinitrd (from the same hardware but
older kernel) and this allows you to boot
Not sure if thats a bad idea or not though :-).
Does you disk device change from hda to sda when
On Mon, Apr 20, 2009 at 11:05:23PM -0700, Arash Ferdowsi wrote:
I'm running 2.6.24-19 (on ubuntu 8.04). I don't explicitly have
splicing turned on (is it on by default?)
No, it requires a specific build option. Well, right now I'm at
loss, especially since several big sites are
On Fri, Apr 24, 2009 at 09:36:34AM +0200, Jean-Baptiste Quenot wrote:
This morning I noticed interesting problems regarding haproxy
(18.104.22.168 here, yes I know archeology might be involved, I must
upgrade). I have to say that we had a blackout during a few hours
this night on
On Mon, May 04, 2009 at 11:47:10AM +0200, Nicolas MONNET wrote:
I'm experiencing a problem since updating to 1.3.17, whereby checks
periodically see a backend service as down, one at a time, but for all 3
checks; and it picks right up again on the next check. Not sure what
info I could get
On Tue, May 12, 2009 at 01:36:46AM +0200, Maik Broemme wrote:
attached is a patch which fixes a configuration mistake regarding the
'tcp-request' option. If you have the following in your configuration
acl localnet dst 10.0.0.0/8
On Tue, May 12, 2009 at 01:57:47AM +0200, Maik Broemme wrote:
I have a small question. Did someone know if it is possible to do simple
traffic multiplexing with HAProxy? Maybe I am missing it somehow, but
want to ask on the list before creating a patch for it.
what do you call
On Wed, May 13, 2009 at 04:53:15PM -0400, Tom Potwin wrote:
Thanks Alex for the info. Unfortunately, I'm already using 'option
httpclose'. Here's my current cfg:
log 127.0.0.1 local0
log 127.0.0.1 local1 notice
#log loghostlocal0 info
On Fri, May 15, 2009 at 03:04:24PM -0400, Tom Potwin wrote:
I don't want to post the entire syslog here - waste of space. Is there
something I could look for?
yes, grep for your browser's IP address. This will give you the logs of
your connections in which we will find what is
On Fri, May 15, 2009 at 05:03:07PM -0400, Tom Potwin wrote:
I don't think I'm going to be much help there. I'm connected to the Internet
through a wireless broadband right now. I connect to my network through a
VPN connection. The server just sees me as a local address.
I had it working for
On Sat, May 16, 2009 at 09:44:53AM -0400, Tom Potwin wrote:
I checked the cfg files for both HAProxy and heartbeat, and they're the same
where they are supposed to be. You we're right about the SYSLOGD=-r
setting. I didn't know I had to do that. I've attached a new copy of the
On Thu, May 14, 2009 at 03:33:39PM +0200, Adrian Moisey wrote:
I tried that, also gave the same result.
What is happening is that the new haproxy process asks the old one
to release the ports so that it can bind to them. So there exists
a short period of time (a few hundreds of
On Thu, May 14, 2009 at 07:58:53PM +0100, Malcolm Turnbull wrote:
Has anyone tried getting stunnel to terminate SSL transparently to
haproxy which then TPROXIES HTTP to the client?
i.e. source ip transparency for both SSL terminated traffic and normal
Or am I
On Fri, May 15, 2009 at 11:11:43AM +0200, Michael Rennt wrote:
I'm using haproxy 22.214.171.124 and I'm not sure about how to read the server
affiliation from the query
string, when usually it's read from a cookie.
The normal way for clients to connect is a listener group,
On Fri, May 15, 2009 at 10:51:20AM -0400, John Lauro wrote:
I think there might be a better way, but you could run the check against a
different port. On that other port, you could have it run your custom check
and return an OK response if your check passes and fail if it doesn't.
-- I replied too early to another mail without CCing you,
please consult the thread how to define custom health-check msg --
And yes, I'm for script-based checks ;-)
On Fri, May 15, 2009 at 05:38:38PM +0200, Craig wrote:
I'd really like to do multiple and advanced
On Mon, May 18, 2009 at 04:21:14PM +, Michael Tinnion wrote:
I've very limited experience with HAProxy and I'm trying to get the
ForwardFor option to work but with no joy.
I've set the following in my 'listen' section
On Mon, May 18, 2009 at 11:51:04AM -0700, Brian Kruger wrote:
Hi, probably a question maybe covered elsewhere and I apologize as I
couldn't find anything, but am curious what the difference is between
USE_TCPSPLICE and USE_LINUX_SPLICE? I know TCP_SPLICE is a patch
that's needed (possibly
On Fri, May 22, 2009 at 09:34:39PM +0530, Sanjeev Kumar wrote:
In response to http-health-chk string: HEAD /index.html HTTP/1.0 ,
if my server responds responds with only one line:
HTTP/1.0 200 OK , will the health will be accepted ok.
(HAproxy in not accepting this
On Fri, May 22, 2009 at 11:37:14AM -0700, Jonah Horowitz wrote:
I¹m currently testing HAProxy for deployment. Right now we use NetScaler
load balancers, and the provide a feature called ³inline monitoring². With
inline monitoring the Netscaler will take a server out of rotation if it
On Mon, May 25, 2009 at 12:22:25PM +0530, Sanjeev Kumar wrote:
I need to debug why Http-healthCheck respoanse is received by proxy-machine,
but HAproxy says no.
Event log just displays single message: server down.
How to enable detailed TCP logging in HAproxy?
haproxy supports several
On Mon, May 25, 2009 at 02:04:07PM +0530, Sanjeev Kumar wrote:
My application on real-server(on port 9123) is responding to http health as
http health chk Cmd HEAD /check.txt HTTP/1.0
server health chk resp HTTP/1.0 200 OK
On the debian-linux on which HAproxy is running, I
On Mon, Jun 01, 2009 at 12:22:57PM -0700, Ryan Schlesinger wrote:
I've got haproxy set up (with 2 frontends) to load balance a php app
which works great. However, we're using a java uploader applet that
doesn't appear to handle cookies. It would be simple for me to have the
1 - 100 of 6174 matches
Mail list logo