Re: proxy haproxy has no server available!

It seems to be a problem with my configuration file. I tried the one from Section 2.3 of haproxy.org/download/1.5/doc/configuration.txt, and it works good now: global log 127.0.0.1 local0 log 127.0.0.1 local1 notice daemon maxconn 256 defaults log

Re: Trouble with getting ocsp response to work

Hi, On Mon, Apr 06, Vasileios Tzimourtos wrote: It was the issue that you mentioned with the 300sec SKEW. I compiled haproxy with smaller value (30 :) ) and id returns the response :) 30s is probably too small: If client's clock is off by 30s then it's possible that haproxy send ocsp response

Re: CPU saturated with 250Mbps traffic on frontend

Willy, I will post results when available. -- Evgeniy On Mon, Apr 6, 2015 at 3:24 PM, Willy Tarreau w...@1wt.eu wrote: On Mon, Apr 06, 2015 at 02:54:13PM +0200, Evgeniy Sudyr wrote: this is server with 2x Intel I350-T4 1G Quad port NICs, where on first card each NIC is connected to uplink

New commitment invitation - haproxy@formilux.org

Sarah Smith Hi Namailu User,

Fwd: proxy haproxy has no server available!

Forgot to cc the list. -- Forwarded message -- From: Igor Cicimov ig...@encompasscorporation.com Date: Tue, Apr 7, 2015 at 4:25 PM Subject: Re: proxy haproxy has no server available! To: Krishna Kumar Unnikrishnan (Engineering) krishna...@flipkart.com On Tue, Apr 7, 2015 at

Re: proxy haproxy has no server available!

Thanks Igor, you pointed me to the correct answer. I removed the check.txt. I am not sure how the file got missing, my systems were down for a few days and I moved to KVM last night. Regards, - KK On Tue, Apr 7, 2015 at 11:56 AM, Igor Cicimov ig...@encompasscorporation.com wrote: Forgot to cc

Re: limiting conn-curs per-ip using x-forwarded-for

Back from easter vacation :) Baptiste wrote on 03/25/2015 10:30 AM: Hi, some useful examples can be taken from this blog post: http://blog.haproxy.com/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/ Just replace src by hdr(X-Forwarded-For). Tried: frontend nocache

Re: global maxconn limit in pure TCP mode

Hi Florin, I suspect I cannot increase the global maxconn indefinitely. At some point, I'll run into some limits. What will dictate those limits? In other words, how should I design the instance running HAproxy to make sure I can increase maxconn to a very high value? I'm far from an expert, but

250 euros offerts pour parier sur le GNT à Lyon

Title: Grand National du Trot - Lyon la Soie Si vous ne voyez pas correctement ce message, visualisez notre version en ligne. Pour tre sr de recevoir tous nos emails, ajoutez newslet...@email.zeturf.com votre carnet dadresses Pour ne plus recevoir de

[PATCH] BUG/MINOR: Display correct filename in error message

Hello, I noticed an error in the output when crl-file is non-existant (or other). Tested with this config: global tune.ssl.default-dh-param 2048 defaults timeout server 10s timeout client 10s timeout connect 10s frontend foo bind *: ssl crt /etc/ssl/certs/combo.pem

[PATCH] Configurable http result codes for http-request deny

This is my first time submitting a modification to haproxy, so I would appreciate feedback. We've been experimenting with using the stick tables feature in Haproxy to do rate limiting by IP at the edge. We know from past experience that we will need to maintain a whitelist because schools and

how to make HAproxy itself reply to a health check from another load balancer?

Let's say HAproxy is used for a second layer of load balancers, with the first layer being AWS ELBs. When you create an ELB, you can specify a health check. This should actually check the health of the HAproxy instances that the ELB is pointing at. Is there a way to make HAproxy answer a

Re: how to make HAproxy itself reply to a health check from another load balancer?

On 07/04/2015 09:55 μμ, Florin Andrei wrote: Let's say HAproxy is used for a second layer of load balancers, with the first layer being AWS ELBs. When you create an ELB, you can specify a health check. This should actually check the health of the HAproxy instances that the ELB is pointing

'acl' and 'use_backend' in defaults section?

I have a few ACLs that are identical for several frontends. I tried to define the ACLs in the defaults section, but I got an error (quote at the end). Is there a way around this? I'd like to not have to repeat identical configuration lines for many frontends. Apr 7 19:05:49 haproxy-test

[PATCH] Add a new log format variable %p that spits out the sanitized request path

It's often undesirable to log query params - and in some cases, it can create legal compliance problems. This commit adds a new log format variable that logs the HTTP verb and the path requested sans query string (and additionally ommitting the protocol). For example, the following HTTP request

Re: [PATCH] Add a new log format variable %p that spits out the sanitized request path

Hi Andrew, On Tue, Apr 07, 2015 at 04:52:38PM -0500, Andrew Hayworth wrote: It's often undesirable to log query params - and in some cases, it can create legal compliance problems. This commit adds a new log format variable that logs the HTTP verb and the path requested sans query string (and

Re: [PATCH] Configurable http result codes for http-request deny

Hi, On Tue, Apr 07, 2015 at 12:03:37PM -0400, CJ Ess wrote: This is my first time submitting a modification to haproxy, so I would appreciate feedback. We've been experimenting with using the stick tables feature in Haproxy to do rate limiting by IP at the edge. We know from past experience

Re: [PATCH] BUG/MINOR: Display correct filename in error message

Hello Alexander, On Tue, Apr 07, 2015 at 04:02:17PM +0200, Alexander Rigbo wrote: Hello, I noticed an error in the output when crl-file is non-existant (or other). Tested with this config: global tune.ssl.default-dh-param 2048 defaults timeout server 10s timeout client

Compression does not seem to work in my setup

Hi all, I am trying to use the compression feature, but don't seem to get it working when trying to curl some text files (16K containing a-zA-Z, also smaller files like 1024 bytes): $ curl -o/dev/null -D - http://192.168.122.110:80/TEXT_16K; -H Accept-Encoding: gzip % Total% Received %