Re: src_inc_gpc0 not working with IPv4 source and IPv6 stick-tables

2014-04-15 Thread Apollon Oikonomopoulos
Hi Thierry, On 21:31 Mon 14 Apr , Thierry FOURNIER wrote: Hi, Thanks for the bug repport, this is fixed in the current HAProxy version. Tested and it works fine, thanks for the fix! Apollon

1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,List, I got a 1.5 dev22 issue on freebsd 10-stable. It reported like below, it's generate about 2-3 errors per minute when using http-keep-alive ,it's about 5-8 errors per minute with http-server-close. I tried use source ip:port1-port2 in server section, but nothing helped. Then I stop

Re: Spam

2014-04-15 Thread Simon Dick
I couldn't care less about the spam that comes through, the bit that annoys me is the mailing list emails when gmail doesn't accept spam and the software complains messages are bouncing :) On 15 April 2014 00:23, Steven Le Roux ste...@le-roux.info wrote: Ok let's do the math. search(in:spam

Re: Stick on SSL Session ID (ssl_session_id)

2014-04-15 Thread Volker Dormeyer
Hi Lukas, Thank you! This really seems to be the case. Did many tests and tcpdumps - TLS session tickets are being exchanged. If I align the browser to SSLv3, only it works. Thanks and Best Regards, Volker // On Mon, Apr 14, 2014 at 12:20:33PM +0200, // Lukas Tribus luky...@hotmail.com wrote:

Re: [PATCH] FEATURE Extending PROXY protocol for SSL

2014-04-15 Thread Willy Tarreau
Hi David, On Mon, Apr 14, 2014 at 09:54:19PM -0400, David S wrote: Hello-- Part of my solution uses a non-HTTP protocol. My backend server need L3/L4 information, so the PROXY protocol is a perfect fit. In addition to TCP and IP addresses, my backend server needs information from the

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
Hi Simon, On Tue, Apr 15, 2014 at 04:22:35PM +0800, k simon wrote: Hi,List, I got a 1.5 dev22 issue on freebsd 10-stable. It reported like below, it's generate about 2-3 errors per minute when using http-keep-alive ,it's about 5-8 errors per minute with http-server-close. I tried use

Fwd: Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Philipp
Missed the reply-to :) Originalnachricht Thanks for the data point, Philipp. If you resend your reply to the list, that might be useful for people other than just me :-) J On 15 April 2014 09:26, Philipp e1c1bac6253dc54a1e89ddc046585...@posteo.net wrote: Am 14.04.2014 23:27

Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Lukas Tribus
Hi, key is certainly to do some fair amount of testing, don't use a release with a lot of very recent activity, but let it cool down a few days, or better, 1 - 3 weeks (and then check fixed bugs 'git log --oneline \ v1.5-devXY..master | grep BUG' to see if anything is relevant for you). You

Re: handle error on haproxy

2014-04-15 Thread Thomas Heil
Hi, On 15.04.2014 12:57, jogendar kushwaha wrote: Hi Team, I have install haproxy load balancer and it working fine. But some issue occur in load balancer. 1. If any error occur in response from web server, error like 40X, 50X then haproxy load balancer forward request to previous or next

RE: handle error on haproxy

2014-04-15 Thread Lukas Tribus
Hi, Hi Team,    I have install haproxy load balancer and it working fine. But some  issue occur in load balancer.  1. If any error occur in response from web server, error like 40X, 50X  then haproxy load balancer forward request to previous or next server.  Is it possible in zen load

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, Does your mean BUG/MINOR: tcpcheck connect wrong behavior or BUG/MEDIUM: checks: immediately report a connection success ? I have not used tcp-check, just used http-check. Does it have the same bug? And the out connections to the server farm is about just 900+, is TW state

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
On Wed, Apr 16, 2014 at 12:46:40AM +0800, k simon wrote: Hi,Willy, Does your mean BUG/MINOR: tcpcheck connect wrong behavior or BUG/MEDIUM: checks: immediately report a connection success ? I don't remember, all I can say is that whatever is tagged BUG must be applied. I have not used

Re: redirecting based on Accept-Language

2014-04-15 Thread Cyril Bonté
Hi Thierry, Le 14/04/2014 21:30, Thierry FOURNIER a écrit : Hi Marc, This dev is done in the current haproxy version. The keyword is language, this is the documentation: language(value[;value[;value[;...]]][,default]) Returns the value with the highest q-factor from a list as

fail the backend immediately if check fails?

2014-04-15 Thread Tomasz Chmielewski
How can I fail the backend immediately, for existing and new connections, if the check fails? With the following settings, if the client is still sending queries, it may take long time (10 mins, perhaps much more), before haproxy sends queries for existing connections to the healthy server:

session persistence timeouts?

2014-04-15 Thread Tomasz Chmielewski
How do I set session persistence timeout in haproxy? For those using LVS, I'm looking for the equivalent of persistent = 3600 option, which would set session persistence to 1 hour. -- Tomasz Chmielewski http://wpkg.org

Re: redirecting based on Accept-Language

2014-04-15 Thread Thierry FOURNIER
On Tue, 15 Apr 2014 21:57:29 +0200 Cyril Bonté cyril.bo...@free.fr wrote: Hi Thierry, Le 14/04/2014 21:30, Thierry FOURNIER a écrit : Hi Marc, This dev is done in the current haproxy version. The keyword is language, this is the documentation:

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, You must never have timewaits on a client, only on a server. So if on your haproxy box you're seeing timewaits for connections going to the backend servers, there's something wrong. Haproxy deploys great efforts at avoiding them by doing a setsockopt(SO_LINGER) to force the system

柏蹲级--面试通知

2014-04-15 Thread pvsr
FONT style=BACKGROUND-COLOR: #ff color=#00ff00 size=6FONT color=#ff PFONT color=#0060c0 size=6FONT style=BACKGROUND-COLOR: #ffFONT color=#ff辛兹雌|/FONT開FONT color=#ff韵饶闭啡纯讼鞠/FONT/FONT/FONT/P PFONT color=#ff size=6FONT style=BACKGROUND-COLOR: #ff↙贺众胀游FONT

Re: Recommended strategy for running 1.5 in production

2014-04-15 Thread Remy van Elst
Andy Walker schreef op 15/04/14 01:19: That's pretty close to our method as well. We've been using haproxy for just over a year, and started with 1.5 because of the built-in SSL capabilities... specifically, version 1.5-dev17. We actually did a fairly minimal amount of testing, and just

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread Willy Tarreau
Hi Simon, On Wed, Apr 16, 2014 at 10:25:46AM +0800, k simon wrote: Hi,Willy, You must never have timewaits on a client, only on a server. So if on your haproxy box you're seeing timewaits for connections going to the backend servers, there's something wrong. Haproxy deploys great

Re: 1.5 dev22 issue on freebsd10-stable

2014-04-15 Thread k simon
Hi,Willy, I'm sorry about strace only support i386 on FreeBSD box, but I'm working on amd64. # uname -a FreeBSD ha-l1-n2 10.0-STABLE FreeBSD 10.0-STABLE #0 r264098: Fri Apr 4 10:57:19 CST 2014 root@ha-l1-n2:/usr/obj/usr/src/sys/10-stable-r264098 amd64 Simon 于 14-4-16 13:40, Willy