Re: Possible causes for termination state "LR"

2014-10-22 Thread Willy Tarreau
Hi Colin, On Tue, Oct 21, 2014 at 04:36:25PM -0500, Colin Ingarfield wrote: > On 10/21/2014 03:59 PM, Cyril Bonté wrote: > >Hi Colin, > > > >Le 21/10/2014 22:05, Colin Ingarfield a écrit : > >>Hello, > >> > >>Please help me understand this output in the haproxy log file: > >> > >>Oct 21 14:53:17 h

Re: Possible causes for termination state "LR"

2014-10-22 Thread Cyril Bonté
Hi Willy, Le 22/10/2014 09:08, Willy Tarreau a écrit : Could you please check in your log if you find other requests from the same IP:port ? I'm wondering if we can't have something like this in the case of keep-alive when a prior request was sent to stats for example (in which case we'd have to

Re: Possible causes for termination state "LR"

2014-10-22 Thread Willy Tarreau
Hi Cyril, On Wed, Oct 22, 2014 at 09:28:39AM +0200, Cyril Bonté wrote: > Hi Willy, > > Le 22/10/2014 09:08, Willy Tarreau a écrit : > >Could you please check in your log if you find other requests from the > >same IP:port ? I'm wondering if we can't have something like this in the > >case of keep

ssl client certificate forwarding

2014-10-22 Thread Rein Remmel
Hi, I’m wondering if there are any plans to support passing client certificate to the backend? Currently most of the certificate fields can be forwarded as headers, but I couldn’t find a way to froward the certificate itself. What I need is something similar to apache RequestHeader set SSL_CLIE

Re: ssl client certificate forwarding

2014-10-22 Thread Jarno Huuskonen
Hi, On Wed, Oct 22, Rein Remmel wrote: > Hi, > > I’m wondering if there are any plans to support passing client certificate to > the backend? Currently most of the certificate fields can be forwarded as > headers, but I couldn’t find a way to froward the certificate itself. What I > need is so

Re: ssl client certificate forwarding

2014-10-22 Thread Rein Remmel
Hi Jarno, Thanks for a prompt reply! It seems to work for me too, although there were some line offsets when applying to version 1.5.6. Any idea what would it take to get it merged? I’ll try to understand what the patch does, but I’m afraid my knowledge of c and ssl is not sufficient to provid

Experiment with an anti-spam on the list

2014-10-22 Thread Willy Tarreau
Hi all, I said that some time ago I had plans for testing a non-intrusive anti-spam solution. So here's what we're doing now. All e-mails to formilux.org pass through haproxy.com's anti-spam filters and are then rerouted to the mailing list server. That way we're performing an external cleanup wit

Re: Experiment with an anti-spam on the list

2014-10-22 Thread Aleksandar Lazic
Hi Willy. [exceptionally top post] Many thanks to you and all involved Peoples for your effort to remove the spam from this list. Best regards, Aleks Am 22-10-2014 20:01, schrieb Willy Tarreau: Hi all, I said that some time ago I had plans for testing a non-intrusive anti-spam solution. So h

Fastsocket and Haproxy

2014-10-22 Thread Arnall
Hi everyone, do you know this project : https://github.com/fastos/fastsocket "Currently Fastsocket is implemented in the Linux kernel(kernel-2.6.32-431.17.1.el6) of CentOS-6.5. According to our evaluations, Fastsocket increases throughput of Nginx and Haproxy(measured by connections per secon

[PATCH] BUG/MINOR: log: fix request flags when keep-alive is enabled

2014-10-22 Thread Cyril Bonté
Colin Ingarfield reported some unexplainable flags in the logs. For example, a "LR" termination state was set on a request which was forwarded to a server, where "LR" means that the request should have been handled internally by haproxy. This case happens when at least client side keep-alive is en

Re: Possible causes for termination state "LR"

2014-10-22 Thread Cyril Bonté
Hi all, Le 22/10/2014 10:30, Willy Tarreau a écrit : I wonder if the flags shouldn't be cleaned up more than it is in http_end_txn_clean_session(), but I'm not sure and didn't have time to check this yesterday. Something like : s->flags &= ~(SN_ERR_MASK | SN_FINST_MASK); Absolutely, it ough

Re: [PATCH] BUG/MINOR: log: fix request flags when keep-alive is enabled

2014-10-22 Thread Willy Tarreau
On Wed, Oct 22, 2014 at 10:30:13PM +0200, Cyril Bonté wrote: > Colin Ingarfield reported some unexplainable flags in the logs. > For example, a "LR" termination state was set on a request which was forwarded > to a server, where "LR" means that the request should have been handled > internally by h

DNS

2014-10-22 Thread Jon Hoffart
Hello, I am doing some experimenting with HAproxy an balancing one of our mail servers. I was wondering if there is any way to have HAproxy do a reverse DNS as the mail log always shows the client ip as the server in which HAproxy is installed and not the IP of the client were the mail m

Re: Experiment with an anti-spam on the list

2014-10-22 Thread Morgan Aldridge
On Wed, Oct 22, 2014 at 2:06 PM, Aleksandar Lazic wrote: > > Many thanks to you and all involved Peoples for your effort to remove > the spam from this list. I second the thanks for putting in time to improve the quality of this list. Thanks! -- Morgan --- http://makkintosshu.com/ http://series

Re: DNS

2014-10-22 Thread Bryan Talbot
On Wed, Oct 22, 2014 at 1:50 PM, Jon Hoffart wrote: > Hello, > I am doing some experimenting with HAproxy an balancing one of our > mail servers. I was wondering if there is any way to have HAproxy do a > reverse DNS as the mail log always shows the client ip as the server in > which HApr

Re: Fastsocket and Haproxy

2014-10-22 Thread Willy Tarreau
Hi Arnall, On Wed, Oct 22, 2014 at 09:35:04PM +0200, Arnall wrote: > Hi everyone, > > do you know this project : > https://github.com/fastos/fastsocket I just got the link forwarded to me today. (...) > Willy have you tried it ? Not yet. But I've read the code :-) The patch is quite small. It