haproxy tcp mode source ip

2018-02-26 Thread mingbei...@baifendian.com
Hi: Hello, great big brother, haproxy gets the source IP in the TCP mode, not the IP address of the haproxy, Thanks; 徐铭贝 Mobile: +86-15801118167

Re: haproxy tcp mode source ip

2018-02-26 Thread Wang Bin
It's not possible to obtain original IP address in TCP proxy mode. If your backend supports proxy protocol, you can enable proxy protocol to pass original IP to your backend. 2018-02-26 16:06 GMT+08:00 mingbei...@baifendian.com : > Hi: > Hello, great big brother,

Re: haproxy tcp mode source ip

2018-02-26 Thread Wang Bin
TCP代理模式没法获得原始的IP,如果你的后端程序支持 proxy protocol,用这个。 怎么用自己查文档吧。 2018-02-26 17:10 GMT+08:00 Wang Bin : > It's not possible to obtain original IP address in TCP proxy mode. > If your backend supports proxy protocol, you can enable proxy protocol > to pass original IP to your

Re: Re: haproxy tcp mode source ip

2018-02-26 Thread mingbei...@baifendian.com
Hi: Thank you. haproxy support HTTP1.1 ? Can Haproxy and TPROXY be ok ? mingbei...@baifendian.com 徐铭贝 数据仓库助理工程师 平台业务部 Mobile: +86-15801118167 E-mail:mingbei...@baifendian.com BAIFENDIAN.COM - Big Data Practitioner 北京市朝阳区北辰西路8号院2号楼北辰世纪中心A座16层 From: Wang Bin Date: 2018-02-26 17:10 To:

Re: Re: haproxy tcp mode source ip

2018-02-26 Thread Wang Bin
Yes, haproxy has HTTP proxy mode. You can obtain original IP address in X-Forwarded-For header (which set by haproxy) in HTTP proxy mode. 2018-02-26 17:23 GMT+08:00 mingbei...@baifendian.com < mingbei...@baifendian.com>: > Hi: > Thank you. haproxy support HTTP1.1 ? Can Haproxy and TPROXY

Re: BUG/MINOR: dns: false positive downgrade of accepted_payload_size

2018-02-26 Thread Lukas Tribus
Hello Baptiste, On 26 February 2018 at 16:04, Baptiste wrote: > Your use case is right and I perfectly understand it and it makes sense to > me. > that said, in my use case, I was using (and meaning) SRV records and using > consul / kubernetes as backend servers. > What I saw

[PATCH] BUG/MEDIUM: buffer: Fix bi/bo_putblk in the wrapping case

2018-02-26 Thread Christopher Faulet
Hi, Here are 2 patches to fix bi_putblk and bo_putblk in the wrapping case. There are 2 patches because the one about bo_putblk must be backported to haproxy 1.5 and newer versions while the one about bi_putblk must only be backported to 1.8. But the fix is the same. Thanks -- Christopher

Re: Re: haproxy tcp mode source ip

2018-02-26 Thread Aaron West
Yes, you can use TPROXY instead of Proxy Protocol if you don't mind the additional routing changes(Need to move to two-arm with real servers setting the GW to be the HAProxy server). You can see an example in this short Blog here:

Re: Re: haproxy tcp mode source ip

2018-02-26 Thread mingbei...@baifendian.com
Hi: Thank you. Is this method IP only displayed in the log? I want to control IP privileges. mingbei...@baifendian.com 徐铭贝 数据仓库助理工程师 平台业务部 Mobile: +86-15801118167 E-mail:mingbei...@baifendian.com BAIFENDIAN.COM - Big Data Practitioner 北京市朝阳区北辰西路8号院2号楼北辰世纪中心A座16层 From: Aaron West Date:

[PATCH] BUG/MINOR: ssl: return alpn string with NULL terminated

2018-02-26 Thread Emmanuel Hocdet
Hi, According to openssl documentation: "SSL_get0_alpn_selected() returns a pointer to the selected protocol in data with length len. It is not NUL-terminated". It consern ssl_sock_get_alpn and smp_fetch_ssl_fc_alpn functions and impact send-proxy-v2 with alpn. The expected get is not an array

Re: Haproxy for Solaris

2018-02-26 Thread Lukas Tribus
Responded on discourse: https://discourse.haproxy.org/t/haproxy-installation-for-an-solaris/2167

Maximum value for inter parameter?

2018-02-26 Thread Nikhil Kapoor
Hi Please respond to the query on discourse: https://discourse.haproxy.org/t/maximum-value-for-inter-parameter/2142 Thanks Nikhil Kapoor

Re: [Gluster-users] NFS Ganesha HA w/ GlusterFS

2018-02-26 Thread TomK
On 2/26/2018 7:14 AM, Kaleb S. KEITHLEY wrote: Hey, Yep. A blog is where I was writing it up to begin with. Anyway, got alot of demand for it over the last one day so here it is: http://microdevsys.com/wp/glusterfs-configuration-and-setup-w-nfs-ganesha-for-an-ha-nfs-cluster/ Skip to the

Re: BUG/MINOR: dns: false positive downgrade of accepted_payload_size

2018-02-26 Thread Baptiste
On Thu, Feb 22, 2018 at 2:04 AM, Lukas Tribus wrote: > Hello Baptiste, > > > > On 21 February 2018 at 19:59, Lukas Tribus wrote: > > Baptiste, I don't think you'd find the symptoms I have in mind > > acceptable on a load-balancer, so there has to be a

RE: Re: haproxy tcp mode source ip

2018-02-26 Thread Tom Maher
Thanks Aaron. Our specific purpose is slightly different, and our network topology means TPROXY doesn't work for us. Regards, Tom -Original Message- From: Aaron West Sent: 26 February 2018 13:28 To: mingbei...@baifendian.com Cc: Wang Bin ;

[PATCH] BUG/MINOR: h2: Set the target of dbuf_wait to h2c

2018-02-26 Thread Christopher Faulet
Hi Willy, Here is a small patch to fix an annoying bug when demux buffer allocation fails in H2. -- Christopher Faulet >From ccf62f1411d64654b6249d28b1f0b89763bbedbb Mon Sep 17 00:00:00 2001 From: Christopher Faulet Date: Mon, 26 Feb 2018 13:43:38 +0100 Subject: [PATCH]

Re: RE: haproxy tcp mode source ip

2018-02-26 Thread mingbei...@baifendian.com
Hi: Thank you very much. I'm trying. mingbei...@baifendian.com 徐铭贝 数据仓库助理工程师 平台业务部 Mobile: +86-15801118167 E-mail:mingbei...@baifendian.com BAIFENDIAN.COM - Big Data Practitioner 北京市朝阳区北辰西路8号院2号楼北辰世纪中心A座16层 From: Tom Maher Date: 2018-02-26 20:07 To: mingbei...@baifendian.com; Aaron

Re: Re: haproxy tcp mode source ip

2018-02-26 Thread Aaron West
Hi, The TPROXY method truly makes it source IP transparent(Your real servers will see the connection as coming from the client's IP) so it will be fine for IP based privileges I think. Aaron West Loadbalancer.org Ltd. www.loadbalancer.org +1 888 867 9504 / +44 (0)330 380 1064

RE: Re: haproxy tcp mode source ip

2018-02-26 Thread Tom Maher
We had a similar requirement. We developed a patch (on 1.8.3) that allows the Proxy Protocol TLV PP2_TYPE_NETNS to be configured as part of a bind with a “send_netns ”, e.g.: frontend cfe bind 192.168.1.20:3128 send_netns 1 mode tcp See below an example capture of the Proxy

Re: [Gluster-users] NFS Ganesha HA w/ GlusterFS

2018-02-26 Thread Kaleb S. KEITHLEY
On 02/25/2018 08:29 PM, TomK wrote: > Hey Guy's, > > A success story instead of a question. > > With your help, managed to get the HA component working with HAPROXY and > keepalived to build a fairly resilient NFS v4 VM cluster.  ( Used > Gluster, NFS Ganesha v2.60, HAPROXY, keepalived w/

Re: [PATCH] BUG/MINOR: h2: Set the target of dbuf_wait to h2c

2018-02-26 Thread Willy Tarreau
Hi Christopher, On Mon, Feb 26, 2018 at 02:06:20PM +0100, Christopher Faulet wrote: > Hi Willy, > > Here is a small patch to fix an annoying bug when demux buffer allocation > fails in H2. Good catch, shame on me on this one! Willy