Help with ACL

2015-07-13 Thread Yogesh Sharma
Hi Team, I am new to HAProxy ACL and following below blog to create a rule to have Application safe from DDOS. http://blog.haproxy.com/2012/10/12/scalable-waf-protection-with-haproxy-and-apache-with-modsecurity/ === frontend ft_waf bind 192.168.10.2:80 name http mode http log global

Missing sessions in haproxy stats

2015-07-13 Thread Nicholas Smit
Hi, Apologies if the answer is in the manual, or in the mailing lists, I couldn't find it. In my Haproxy config, I have a front-end and several backends. The stats page is showing stats of sessions, CUR = 1098. (CSV output below) However, if I add up all the sessions for all its back-ends, I

Re: Segfault when parsing a configuration file

2015-07-13 Thread Vincent Bernat
❦ 11 juillet 2015 14:20 +0200, Lukas Tribus luky...@hotmail.com : Thanks for the detailed repro. This bug is fixed in release 1.5.10 by commit ed061c0590 (BUG/MEDIUM: config: do not propagate processes between stopped processes) [1]. Quoting from the commit: Immo Goltz reported a case of

Problems compiling HAProxy with Lua Support

2015-07-13 Thread bjun...@gmail.com
Hi, i'm trying to build HAProxy 1.6 (git HEAD) with Lua (5.3.1) on Ubuntu 14.04. This was my first try: make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 USE_LUA=yes LUA_LIB=/opt/lua53/lib/ LUA_INC=/opt/lua53/include/ LDFLAGS=-ldl resulting error: . . . gcc -ldl -o haproxy

IP binding and standby health-checks

2015-07-13 Thread Nathan Williams
Hi all, I'm hoping I can get some advice on how we can improve our failover setup. At present, we have an active-standby setup. Failover works really well, but on the standby, none of the backend servers are marked as up since haproxy is bound to the VIP that is currently on the active member

Re: Problems compiling HAProxy with Lua Support

2015-07-13 Thread Vincent Bernat
❦ 13 juillet 2015 19:16 +0200, bjun...@gmail.com bjun...@gmail.com : make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1 USE_LUA=yes LUA_LIB=/opt/lua53/lib/ LUA_INC=/opt/lua53/include/ LDFLAGS=-ldl resulting error: . . . gcc -ldl -o haproxy src/haproxy.o src/sessionhash.o

tcp-request + gpc ACLs

2015-07-13 Thread bjun...@gmail.com
Hi, i'm using stick-tables to track requests and block abusers if needed. Abusers should be blocked only for a short period of time and i want a stick-table entry to expire. Therefore, i have to check if the client is already marked as an abuser and do not track this client. example config:

Test HAProxy configuration file

2015-07-13 Thread Erik Schwalbe
Hi, is it possible to show and test the configuration of haproxy like apache2ctl -S? I want to check with which configuration options haproxy starts. Thanks for help. Regards, Erik Erik Schwalbe Canoo Engineering AG Kirschgartenstrasse 5 CH-4051 Basel Tel: +41 61 228 94 44 Fax: +41 61 228 94

RE: Test HAProxy configuration file

2015-07-13 Thread Lukas Tribus
Hi Lukas, the output of haproxy -c is not helpful. Configuration file is valid“  I though thats what you want. I need a more verbose output with a complete overview of the configuration. I want to check if options configured in the default or global sections works for all the

RE: Test HAProxy configuration file

2015-07-13 Thread Lukas Tribus
Hi Erik, Hi, is it possible to show and test the configuration of haproxy like apache2ctl -S? I want to check with which configuration options haproxy starts. Thanks for help.  Yes, see haproxy -h (haproxy -c). Lukas

Re: Test HAProxy configuration file

2015-07-13 Thread Erik Schwalbe
Hi Lukas, the output of haproxy -c is not helpful. Configuration file is valid“ I need a more verbose output with a complete overview of the configuration. I want to check if options configured in the default or global sections works for all the backends for example. Regards, Erik Am

Re: Contribution: change response line

2015-07-13 Thread Baptiste
On Mon, Jul 13, 2015 at 7:22 AM, Bowen Ni bowen1...@gmail.com wrote: Hi, With Lua integration in HAProxy 1.6, one can change the request method, path, uri, header, response header etc except response line. Hi Bowen, You can already change the fields above using HAProxy 1.6 statements:

Tailor Made Services For You!— Guzhen Lighting Fair

2015-07-13 Thread Guzhen Lighting Fair
Tailor Made Services For You!— Guzhen Lighting Fair Hello haproxy@formilux.org, 看上去似乎您的e-mail软件不支持HTML。 请访问下面的网页使您能够在网页浏览其中阅读这条信息: http://edm.ubmsinoexpo.com/x/?S7a1MPufa2tuZmb4v8jW0tDMzOR.jq2hgbmRBQAA76