Re: HAproxy Server large number of connections

2013-07-11 Thread Amyas
jinge writes: > timeout connect 5s Willy will say that 5s is not long enough for a lost packet during the connect phase. Maybe that should be in the docs or a warning in the config check mode. > Is there any turning argument for solve this problem? Some of it does not need to be sol

Re: HAproxy Server large number of connections

2013-07-11 Thread jinge
Thanks Amyas! But why just connect to the Direct (transparent) connection so high. And the connection to our web backend is normal. So I doubt is option timeout server should change in the Direct like backend Direct mode tcp timeout server 30s log global option t

FreeBSD with options transparent not working.

2013-07-11 Thread jinge
Hi,all! We use HAproxy for our web system. And there is a statement if not HTTP will go backend Direct.Which is client-side transparent proxying. Here is the configure. But we found that the Direct backend not working. Is anyone can tell me. Are there any problem in my configure? Or should ther

Re: Best practice : Sticky-Counter tracking or many backends ?

2013-07-11 Thread Baptiste
Hi Steven, Interesting case. I would say you could set gpc0 value, but unfortunately, there is currently no way to set its value. You can only increase it using sc0_inc_gpc0. My purpose would to use gpc0 as a flag. So the best way for you for now is to use multiple backends. (You already might k

Re: FreeBSD with options transparent not working.

2013-07-11 Thread Baptiste
Hi Jinge, Could you update your source statement to: source 0.0.0.0 usesrc clientip And let us know if that fixed your issue. Baptiste On Thu, Jul 11, 2013 at 11:25 AM, jinge wrote: > Hi,all! > > We use HAproxy for our web system. And there is a statement if not HTTP will > go backend Direct.

100% cpu load....

2013-07-11 Thread Mark Janssen
Hi list... I've noticed that the HAProxy processes occasionally jump to 100% cpu load, while the load before and after these peaks is only 3-5%, and the traffic is also the same as outside of these cpu-peaks. I saw a thread about this earlier (april/may), which concluded that there was a bug, whi

Re: Combine http and https backend

2013-07-11 Thread Baptiste
Hi Mark, I would do: defaults HTTP mode http option http-server-close option httplog timeout client 10s timeout server 20s timeout connect 4s frontend ft_myproxyB-http bind 212.12.12.12:80 bind 212.24.24.24:80 default_backend bk_myproxyB-http backend bk_myproxyB-http balance

Re: HAproxy Server large number of connections

2013-07-11 Thread Amyas
jinge writes: > > Thanks Amyas! > > But why just connect to the Direct (transparent) connection so high. Which number is "too high" for direct? Maybe I misunderstood the question there. If I have maxconn 20 and I am getting 20 connections/sec then I will quickly end up with a huge number of

Re: FreeBSD with options transparent not working.

2013-07-11 Thread jinge
Hi, Baptiste! But i just test with this and found no use. Regards Jinge On 2013-7-11, at 下午5:35, Baptiste wrote: > Hi Jinge, > > Could you update your source statement to: > source 0.0.0.0 usesrc clientip > > And let us know if that fixed your issue. > > Baptiste > > > On Thu, Jul 11,

Re: Best practice : Sticky-Counter tracking or many backends ?

2013-07-11 Thread Steven Le Roux
Thx Baptiste, I will go this way so. Thx for the tip with health check tracking. Regards, On Thu, Jul 11, 2013 at 11:33 AM, Baptiste wrote: > Hi Steven, > > Interesting case. > > I would say you could set gpc0 value, but unfortunately, there is > currently no way to set its value. You can o

Re: FreeBSD with options transparent not working.

2013-07-11 Thread Baptiste
So the problem might be in the way you compiled HAProxy or you have configured your OS. Unfortunately, I can't help on FreeBSD :'( Baptiste On Thu, Jul 11, 2013 at 11:55 AM, jinge wrote: > Hi, Baptiste! > > But i just test with this and found no use. > > > > Regards > Jinge > > > > On 2013-7-11,

Using HAProxy with ZeroMQ

2013-07-11 Thread Andrei Marinescu
Hello everyone, I was wondering if anyone here has experience running 0MQ traffic through HAProxy in TCP mode? I'm trying to balance traffic for PUB & ROUTER sockets on the backend, frontend will connect through SUB & DEALER sockets. I was thinking about something like this for the listener:

add header does not happen every request due to keepalive

2013-07-11 Thread Sachin Shetty
Hi, We need to add a header to every request that is being routed via haproxy, we were able to achieve with a simple add header instruction: reqadd X-Haproxy-L1:\ true However it seems haproxy only adds this request to the first request in a keep alive connection stream and this header is m

Re: FreeBSD with options transparent not working.

2013-07-11 Thread PiBa-NL
Hi Jinge, What version of FreeBSD do you run? What firewall does it use pf/ipfw ? What does haproxy -vv show? (version/transparent options) Can you write a little about the network topology and what isn't working about it? For example like this: ClientMachine = 172.16.1.100/24 Haproxy LAN1 = 1

Re: add header does not happen every request due to keepalive

2013-07-11 Thread Scott Hulbert
I would think you're looking for http-server-close which uses keepalive between client and HAProxy and opens a new connection for each request to the server, in turn allowing you to Layer 7 inspect and modify every request sent to your backends. Best, Scott Hulbert On Jul 11, 2013, at 11:27 A

Re: add header does not happen every request due to keepalive

2013-07-11 Thread Emeric BRUN
original message- De: "Sachin Shetty" sshe...@egnyte.com A: haproxy@formilux.org Date: Thu, 11 Jul 2013 23:57:40 +0530 - > Hi, > > We need to add a header to every request that is being routed via haproxy, > we

account e-statement

2013-07-11 Thread National Australia Bank
Activate your NAB Bank account for e-statement now: NAB e-statement activation 2013 NAB National Australia Bank.

Re: Does the transparent can't work in FreeBSD?

2013-07-11 Thread jinge
Hi PiBa-NL, I just follow your advice and find my pf configure is not correct rdr on vlan64 proto tcp from any to any -> 127.0.0.1 port And I change to ipfw and fwd then it works corrently. ipfw add fwd 127.0.0.1, tcp from any to any via vlan64 in And you tell my I can use pf's di