Re: [PATCH] MEDIUM: ssl: allow haproxy to start without default certificate

2017-08-08 Thread Emmanuel Hocdet
Hi Willy, Emeric, Christopher The new patch is much simpler: ++ Manu 0001-MINOR-ssl-allow-to-start-without-certificate-if-stri.patch Description: Binary data > Le 28 juil. 2017 à 23:24, Willy Tarreau a écrit : > > On Fri, Jul 28, 2017 at 07:17:24PM +0200, Emmanuel Hocdet wrote: >>> I thi

Share usage limits across backend servers?

2017-08-08 Thread Mark Staudinger
Hi Folks, I have a multi-tenant HAProxy set-up loosely as follows frontend main bind ip:port various options ACLs to match domains (client1, client2, etc) use_backend client1 if client1 use_backend client2 if client2 backend client1 verious options option httpchk with customized

Re: Share usage limits across backend servers?

2017-08-08 Thread Aleksandar Lazic
Hi Mark, Mark Staudinger wrote on 08.08.2017: > Hi Folks, > > I have a multi-tenant HAProxy set-up loosely as follows > > frontend main >bind ip:port >various options >ACLs to match domains (client1, client2, etc) >use_backend client1 if client1 >use_backend client2 if client2

Re: Share usage limits across backend servers?

2017-08-08 Thread Willy Tarreau
Hi Aleks, On Tue, Aug 08, 2017 at 11:18:54PM +0200, Aleksandar Lazic wrote: > Hi Mark, > > Mark Staudinger wrote on 08.08.2017: > > > Hi Folks, > > > > I have a multi-tenant HAProxy set-up loosely as follows > > > > frontend main > >bind ip:port > >various options > >ACLs to match do

Re: maxconn not respecting idle connections?

2017-08-08 Thread Willy Tarreau
Hi Claudio, On Tue, Aug 08, 2017 at 07:16:17AM +0200, Claudio Kuenzler wrote: > Hi, > > I've set "hard limits" with maxconn for each backend server but it seems > that established (keep-alive) connections are not accounted for in the > stats. This leads to HAProxy allowing more connections to the

Re: [PATCH] MEDIUM: ssl: allow haproxy to start without default certificate

2017-08-08 Thread Willy Tarreau
Hi Manu, On Tue, Aug 08, 2017 at 03:00:47PM +0200, Emmanuel Hocdet wrote: > Hi Willy, Emeric, Christopher > > The new patch is much simpler: > From f2918c87910f3ba18a2536eee5f4b9573cc695e3 Mon Sep 17 00:00:00 2001 > From: Emmanuel Hocdet > Date: Sun, 30 Jul 2017 18:29:04 +0200 > Subject: [PATC