Re: Reg: HAProxy 1.6.12 on RHEL7.2 (MAXCONN in FRONT-END/LISTEN BLOCK)

2017-06-28 Thread Velmurugan Dhakshnamoorthy
Thanks Much Andrew, I will definitely explore on this. Thanks again. On Jun 28, 2017 22:03, "Andrew Smalley" wrote: > Hi Vel > > Form what you describe the example using the tarpit feature may help you > taken from here

Re: Reg: HAProxy 1.6.12 on RHEL7.2 (MAXCONN in FRONT-END/LISTEN BLOCK)

2017-06-28 Thread Willy Tarreau
Hi, On Wed, Jun 28, 2017 at 05:01:25PM +0800, Velmurugan Dhakshnamoorthy wrote: > As I mentioned earlier, I was not aware that the people from discourse > forum and this email d-list group are same. I am 100% new to HAProxy. In general (and this is absolutely not specific to haproxy), when

Re: Reg: HAProxy 1.6.12 on RHEL7.2 (MAXCONN in FRONT-END/LISTEN BLOCK)

2017-06-28 Thread Igor Cicimov
Hi all, On Thu, Jun 29, 2017 at 11:23 AM, Velmurugan Dhakshnamoorthy < dvel@gmail.com> wrote: > Thanks Much Andrew, I will definitely explore on this. > > Thanks again. > > On Jun 28, 2017 22:03, "Andrew Smalley" wrote: > >> Hi Vel >> >> Form what you describe

RE: Rewriting/redirecting part of URL

2017-06-28 Thread Mark Holmes
Great, I'll give that a go. Thanks Philipp! PS Don't feel sorry for me, I don't work for VWG group directly :) -Original Message- From: Philipp Buehler [mailto:e1c1bac6253dc54a1e89ddc046585...@posteo.net] Sent: 28 June 2017 18:37 To: Mark Holmes Cc: 'haproxy@formilux.org' Subject: Re:

Looking for a way to limit simultaneous connections per IP

2017-06-28 Thread Patrick Hemmer
So as the subject indicates, I'm looking to limit concurrent connections to a backend by the source IP. The behavior I'm trying for is that if the client has more than 6 connections, we sit on the request for a second, and then send back a 302 redirect to the same resource that was just requested.

Replacing reqadd with http-request set-path

2017-06-28 Thread Norman Branitsky
The HAProxy 1.7 manual says: "Using "reqadd"/"reqdel"/"reqrep" to manipulate request headers is discouraged in newer versions (>= 1.5)." I've copied the "reqadd" statements from my HAProxy 1.5.18 configuration to Haproxy 1.7.7 and now want to update them: acl path_licd path_beg

Re: Looking for a way to limit simultaneous connections per IP

2017-06-28 Thread Mark Staudinger
Hi Patrick, Where are you using the stick table and lua script call? Frontend or backend? Perhaps this would work: * In the frontend, check the connection count from the "real backend" stick table * if the count is > 6, set ACL for the source *Use this ACL to steer the conection to the

Re: Looking for a way to limit simultaneous connections per IP

2017-06-28 Thread Michael Ezzell
On Jun 28, 2017 16:58, "Patrick Hemmer" wrote: We instead need a way to differentiate (count) connections held open and sitting in the Lua delay function, and connections being processed by a server. My wishlist would be per-client queueing, sort of a source IP or

Re: Looking for a way to limit simultaneous connections per IP

2017-06-28 Thread Patrick Hemmer
On 2017/6/28 17:40, Mark Staudinger wrote: > Hi Patrick, > > Where are you using the stick table and lua script call? Frontend or > backend? > > Perhaps this would work: > > * In the frontend, check the connection count from the "real backend" > stick table > * if the count is > 6, set ACL for

Subscribe

2017-06-28 Thread Mark Holmes
This e-mail message is being sent solely for use by the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by phone or reply by e-mail,

How to forward HTTP / HTTPS to different backend proxy servers

2017-06-28 Thread Daren Sefcik
Hi, I have searched for an answer to this and tried several things but cannot seem to figure it out so am hoping someone can point me in the right direction. I have different backend proxy servers (squid) setup to handle specifically HTTP and HTTPS traffic but cannot figure out how to tell haproxy

Re: How to forward HTTP / HTTPS to different backend proxy servers

2017-06-28 Thread Olivier Doucet
Hi, 2017-06-28 16:47 GMT+02:00 Daren Sefcik : > Hi, I have searched for an answer to this and tried several things but > cannot seem to figure it out so am hoping someone can point me in the right > direction. I have different backend proxy servers (squid) setup to

Re: Reg: HAProxy 1.6.12 on RHEL7.2 (MAXCONN in FRONT-END/LISTEN BLOCK)

2017-06-28 Thread Andrew Smalley
Hi Vel Form what you describe the example using the tarpit feature may help you taken from here https://blog.codecentric.de/en/2014/12/haproxy-http-header-rate-limiting/ frontend fe_api_ssl bind 192.168.0.1:443 ssl crt /etc/haproxy/ssl/api.pem no-sslv3 ciphers ... default_backend be_api

Re: High Availability for haproxy itself

2017-06-28 Thread Daren Sefcik
We use PfSense with CARP & HaProxy, works great. On Fri, Jun 2, 2017 at 1:34 AM, Jiafan Zhou wrote: > Hi, > > Haproxy ensures the HA for real servers such as httpd. However, in the > case of haproxy itself, if it fails, then it requires another instance of > haproxy to

Rewriting/redirecting part of URL

2017-06-28 Thread Mark Holmes
Hi all, I am trying to achieve the following in haproxy 1.6.6 We have a URL www.old.com/audi/page/whatever I'd like to redirect, maintaining everything after the first / ie /audi/page/whatever For example

Re: How to forward HTTP / HTTPS to different backend proxy servers

2017-06-28 Thread Daren Sefcik
On Wed, Jun 28, 2017 at 8:12 AM, Olivier Doucet wrote: > Hi, > > > 2017-06-28 16:47 GMT+02:00 Daren Sefcik : > >> Hi, I have searched for an answer to this and tried several things but >> cannot seem to figure it out so am hoping someone can point

Re: Rewriting/redirecting part of URL

2017-06-28 Thread Philipp Buehler
Am 28.06.2017 19:20 schrieb Mark Holmes: Note that /audi/page/whatever will change all the time - essentially, I want to preserve whatever comes after the first /, just rewriting the domain part I feel bad for "Audi" (shouts from an ex-Daimler one.. :D ) now. With 1.6 you can just do that

Re: Reg: HAProxy 1.6.12 on RHEL7.2 (MAXCONN in FRONT-END/LISTEN BLOCK)

2017-06-28 Thread Velmurugan Dhakshnamoorthy
Hi Lukas, Thanks for your response in length. As I mentioned earlier, I was not aware that the people from discourse forum and this email d-list group are same. I am 100% new to HAProxy. Let me explain my current situation in-detail in this email thread, Kindly check if you or other people from