Re: IPv6 resolvers seems not works

2017-04-11 Thread Baptiste
Hi all, Thank you Frededic!!! Willy, you can merge (and backport to 1.6) Frederic's patch please? Baptiste On Tue, Apr 11, 2017 at 10:45 AM, Павел Знаменский wrote: > Frederic, > Your patch fixes this issue. > > Thank you! > > > 2017-04-11 9:53 GMT+03:00 Frederic

Re: Propagating agent-check weight change to tracking servers

2017-04-11 Thread Willy Tarreau
Hi Michal, On Tue, Apr 11, 2017 at 04:41:25PM +0200, Michal wrote: > Hello Willy, > > So I'm fighting with dba97077 made by Frédéric Lécaille - it broke many > things. That's the principle of distributed development : better get your changes in shape first so that you don't have to adapt to

Re: Propagating agent-check weight change to tracking servers

2017-04-11 Thread Michał
Hello Willy, So I'm fighting with dba97077 made by Frédéric Lécaille - it broke many things. E.g. you can't use "source", because that patch broke it. I'm curious how many other stuff got broken with those patches around default-server. We need some CI (even if they will only build haproxy) and

trying to understand sticky counters

2017-04-11 Thread Adam Spiers
Hi all, I've pored over the Configuration Manual again and again, and I'm still struggling to fully understand sticky counters. This paragraph seems to hold some important information: Once a "track-sc*" rule is executed, the key is looked up in the table and if it is not found, an entry

Re: ACL with dynamic pattern

2017-04-11 Thread Holger Just
Hi Alexander, Alexander Lebedev wrote: > I want to implement CSRF check with haproxy. > I want to check cookie value matched the header value and deny request > if they're didn't equal. The ACLs are only equipped to compare a dynamic value (e.g. from a fetch) with a statically define value. It

Re: IPv6 resolvers seems not works

2017-04-11 Thread Willy Tarreau
On Tue, Apr 11, 2017 at 03:55:25PM +0200, Baptiste wrote: > Hi all, > > Thank you Frededic!!! > Willy, you can merge (and backport to 1.6) Frederic's patch please? Done, thanks guys! Willy

Re: Admin socket server state and MAINT flag issues

2017-04-11 Thread Willy Tarreau
Hi Dennis, On Mon, Apr 10, 2017 at 09:05:13PM +0200, Dennis Jacobfeuerborn wrote: > Hi, > i'm currently playing with the values that the admin socket return when > the "show servers state" command is issued and I noticed to things: > > 1. When using and abstract namespace socket as address on a

Re: [RFC][PATCHES] seamless reload

2017-04-11 Thread Willy Tarreau
Hi guys, On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > IMHO: a better name would be 'stats nounsedsockets', as it is referring to a > generic functionality of UNIX stats socket, rather to a very specific > functionality. Just two things on this : - it's not directly

Re: simgle ?

2017-04-11 Thread Willy Tarreau
On Mon, Apr 10, 2017 at 03:48:45PM -0600, Jim Freeman wrote: > https://github.com/haproxy/haproxy/search?q=simgle > > single ? > simple ? Looks like "single". Care to send a patch ? Please keep in mind that this github project is neither up to date nor official so please make your patch on top

Re: [RFC][PATCHES] seamless reload

2017-04-11 Thread Olivier Houchard
On Tue, Apr 11, 2017 at 08:16:48PM +0200, Willy Tarreau wrote: > Hi guys, > > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > > IMHO: a better name would be 'stats nounsedsockets', as it is referring to a > > generic functionality of UNIX stats socket, rather to a very specific

Re: IPv6 resolvers seems not works

2017-04-11 Thread Frederic Lecaille
On 04/10/2017 04:17 PM, Frederic Lecaille wrote: On 04/10/2017 01:42 PM, Павел Знаменский wrote: Hello, Hello, I'm trying to add IPv6 address as a nameserver to able resolve addresses in IPv6-only environment: resolvers google_dns_10m nameserver google_dns1 2001:4860:4860:::53

Re: ModSecurity: First integration patches

2017-04-11 Thread Thierry Fournier
> On 11 Apr 2017, at 11:24, Olivier Doucet wrote: > > Hi Thierry, > > > > 2017-04-11 10:49 GMT+02:00 Thierry Fournier : > Hi list > > I join one usage of HAProxy / SPOE, it is WAF offloading. > > These patches are a first version, it have some

Re: [RFC][PATCHES] seamless reload

2017-04-11 Thread Pavlos Parissis
On 10/04/2017 11:52 μμ, Olivier Houchard wrote: > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: >> On 10/04/2017 08:09 , Olivier Houchard wrote: >>> >>> Hi, >>> >>> On top of those patches, here a 3 more patches. >>> The first one makes the systemd wrapper check for a

Re: [RFC][PATCHES] seamless reload

2017-04-11 Thread Olivier Houchard
On Tue, Apr 11, 2017 at 01:23:42PM +0200, Pavlos Parissis wrote: > On 10/04/2017 11:52 μμ, Olivier Houchard wrote: > > On Mon, Apr 10, 2017 at 11:08:56PM +0200, Pavlos Parissis wrote: > >> On 10/04/2017 08:09 , Olivier Houchard wrote: > >>> > >>> Hi, > >>> > >>> On top of those patches, here a

Re: ACL with dynamic pattern

2017-04-11 Thread Alexander Lebedev
Aleksandar, Hello! No, it does not help. haproxy -vv output: HA-Proxy version 1.7.4 2017/03/27 Copyright 2000-2017 Willy Tarreau Build options : TARGET = solaris CPU = generic CC = /pub/site/opt/bin/gcc CFLAGS = -O2 -g -fno-strict-aliasing

Re: [RFC][PATCHES] seamless reload

2017-04-11 Thread Pavlos Parissis
On 10/04/2017 11:48 μμ, Olivier Houchard wrote: > On Mon, Apr 10, 2017 at 10:49:21PM +0200, Pavlos Parissis wrote: >> On 07/04/2017 11:17 , Olivier Houchard wrote: >>> On Fri, Apr 07, 2017 at 09:58:57PM +0200, Pavlos Parissis wrote: On 06/04/2017 04:57 , Olivier Houchard wrote: >

ModSecurity: First integration patches

2017-04-11 Thread Thierry Fournier
Hi list I join one usage of HAProxy / SPOE, it is WAF offloading. These patches are a first version, it have some limitations describe in the README file in the directory contrib/modsecurity. - Christopher, please check the patch "BUG/MINOR", it is about spoe functions. - The exemple of

Re: IPv6 resolvers seems not works

2017-04-11 Thread Павел Знаменский
Frederic, Your patch fixes this issue. Thank you! 2017-04-11 9:53 GMT+03:00 Frederic Lecaille : > On 04/10/2017 04:17 PM, Frederic Lecaille wrote: > >> On 04/10/2017 01:42 PM, Павел Знаменский wrote: >> >>> Hello, >>> >> >> Hello, >> >> I'm trying to add IPv6 address as

Re: ModSecurity: First integration patches

2017-04-11 Thread Olivier Doucet
Hi Thierry, 2017-04-11 10:49 GMT+02:00 Thierry Fournier : > Hi list > > I join one usage of HAProxy / SPOE, it is WAF offloading. > > These patches are a first version, it have some limitations describe > in the README file in the directory contrib/modsecurity. > > -