Re: [PATCH 0/2] Add support for TLS ticket keys configuration

2015-03-02 Thread Dirkjan Bussink
Hi all, > On Fri, Feb 27, 2015 at 07:56:48PM +0100, Nenad Merdanovic wrote: >> This patchset adds support to configure TLS ticket keys used for >> encryption and decryption of TLS tickets. >> >> This is the 2nd version of the patchset that has been updated based on >> suggestions from Willy TaRr

Re: [PATCH 1/4] MINOR: lua: typo in an error message

2015-03-02 Thread Willy Tarreau
Hi Cyril, On Mon, Mar 02, 2015 at 12:08:38AM +0100, Cyril Bonté wrote: > A small typo was introduced in an error message, occuring when too many > arguments are provided ("Malformed argument mask"). (...) whole series applied, thanks! Willy

Re: Lua patchset merged

2015-03-02 Thread Thierry FOURNIER
On Sun, 01 Mar 2015 17:34:36 +0100 Aleksandar Lazic wrote: > Dear Thierry. > > Cool work ;-) > > Am 01-03-2015 13:47, schrieb Thierry FOURNIER: > > Hi everyone, > > > > Thanks Willy for the introduction. > > > > I join the first part of the document. All the function are not yet > > available

Re: Lua patchset merged

2015-03-02 Thread Thierry FOURNIER
On Sun, 01 Mar 2015 23:45:01 +0100 Cyril Bonté wrote: > Hi again Thierry, > > Le 01/03/2015 18:22, Cyril Bonté a écrit : > > I think I'll try some LUA scripts before the end of the week-end (which > > is approaching too quickly) ;-) > > OK, I could play with some Lua scripts. > I could declare

Re: Lua patchset merged

2015-03-02 Thread Thierry FOURNIER
On Sun, 1 Mar 2015 23:20:14 +0100 Baptiste wrote: > how do you pass arguments to a lua function? > Imagine I want to call the following lua function: "function download > (host, file)" If you ask about argument between HAProxy configuration file and Lua function, I assume than my documentatio

Re: [PATCH 0/2] Add support for TLS ticket keys configuration

2015-03-02 Thread Nenad Merdanovic
Hi Dirkjan, On 3/2/2015 1:24 PM, Dirkjan Bussink wrote: Hi all, On Fri, Feb 27, 2015 at 07:56:48PM +0100, Nenad Merdanovic wrote: This patchset adds support to configure TLS ticket keys used for encryption and decryption of TLS tickets. This is the 2nd version of the patchset that has been u

Re: Lua patchset merged

2015-03-02 Thread Aleksandar Lazic
Am 02-03-2015 14:51, schrieb Thierry FOURNIER: On Sun, 01 Mar 2015 17:34:36 +0100 Aleksandar Lazic wrote: [snipp] Maybe it would be possible to integrate lua-scripting into the check agent framework? Hi, thank you. It is certainly possible. Have you some concrete usage case ? I'm so

[FIX] [LUA] segfault in txn.get_headers

2015-03-02 Thread Baptiste
When we try to execute the txn.get_headers function in a TCP mode frontend or backend, then HAProxy segfaults. Baptiste 0001-fix-a-segfault-in-txn.get_headers.patch Description: Binary data

[FIX] [LUA] missing ifdef related to Openssl

2015-03-02 Thread Baptiste
a couple of missing ifdef for openssl prevent to build LUA without SSL enabled. This patch fix it. Baptiste 0002-FIX-missing-ifdef-related-to-SSL-when-enabling-LUA.patch Description: Binary data

Long living TCP connections

2015-03-02 Thread Pavlos Parissis
Hi, Today I noticed after a reload that previous process was alive for long time( >8hours). This is a HAProxy which runs in HTTP mode in front of few squid servers, conf is quite simple[1] and the version is 1.5.6[2] I had a lsof watcher for the old pid and the number of connections were very slo

Re: Lua patchset merged

2015-03-02 Thread Baptiste
I love it ! Just wrote, as a proof of concept, a forward proxy... That said, it seems my lua script is "blocking"... I mean, if the remote server is slow to deliver the response, then HAProxy doesn't process any other request or response. Baptiste

RE: Long living TCP connections

2015-03-02 Thread Lukas Tribus
> The HAProxy is used by normal browsers > but also from cronjobs with various languages(Perl,Python,C,Go etc) > > I was surprised about this very long inactivity period for TCP > connection on a system which has reasonable settings for TCP keepalive[3]. This is not what TCP keepalives does. First

Re: Long living TCP connections

2015-03-02 Thread Pavlos Parissis
On 03/03/2015 12:14 πμ, Lukas Tribus wrote: >> The HAProxy is used by normal browsers >> but also from cronjobs with various languages(Perl,Python,C,Go etc) >> >> I was surprised about this very long inactivity period for TCP >> connection on a system which has reasonable settings for TCP keepalive

RE: Long living TCP connections

2015-03-02 Thread Lukas Tribus
> Hold on a second let me get that right. > Without TCP keep alive enabled, a client which sends some data every > 10mins and timeout client set to 30m it more or less means that the > connection will only drop by the client. Am I right? Without *HTTP* keep-alive you mean. Well, that depends what