[PATCH] REGTEST/MINOR

2018-08-23 Thread Frederic Lecaille
Hi ML, Here are two patches for haproxy reg testing. Note that we have recently added an new feature to varnishtest so that to send commands to the CLI without running a shell, socat etc (https://varnish-cache.org/docs/trunk/reference/vtc.html#haproxy). This breaks reg-tests/spoe/h0.vtc r

Re: Multiple connections to the same URL with H2

2018-08-23 Thread Ing. Andrea Vettori
Hello, enabling http log on one of our frontends I found this in the haproxy logs when I see the ‘broken pipe’ error on the application log. Note the two calls are separated by just 11 milliseconds. [23/Aug/2018:08:38:46.731] b2b~ b2b-ssl-servers/web3 0/0/1/-1/7 -1 0 - - CDVN 36/20/0/0/0 0/0 "G

Re: [PATCH] MEDIUM: reset lua transaction between http requests

2018-08-23 Thread Thierry Fournier
Hi, Your patch make sense, that’s the right appoach, but I have a doubt about the place to use for doing the reinitialization. I add Willy in this thread in order to have http2 advisor. Before the 1.8 the Lua context was reinitialized with the stream because the stream was reinitialized between

Re: BUG: Tw is negative with lua sleep

2018-08-23 Thread Thierry Fournier
> On 22 Aug 2018, at 06:00, Patrick Hemmer wrote: > > > > On 2018/7/18 09:03, Frederic Lecaille wrote: >> Hello Patrick, >> >> On 07/17/2018 03:59 PM, Patrick Hemmer wrote: >>> Ping? >>> >>> -Patrick >>> >>> On 2018/6/22 15:10, Patrick Hemmer wrote: When using core.msleep in lua

Re: BUG: Tw is negative with lua sleep

2018-08-23 Thread Frederic Lecaille
On 08/23/2018 09:47 AM, Thierry Fournier wrote: On 22 Aug 2018, at 06:00, Patrick Hemmer wrote: On 2018/7/18 09:03, Frederic Lecaille wrote: Hello Patrick, On 07/17/2018 03:59 PM, Patrick Hemmer wrote: Ping? -Patrick On 2018/6/22 15:10, Patrick Hemmer wrote: When using core.msleep in

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Thierry Fournier
Hi [...] >> I miss also the relation between oprators and between the content >> of operators. I mean AND or OR. How I understand your example: >> >> +local filter = { >> + lt={{"gpc0", 1}, {"gpc1", 2}}, >> + gt={{"conn_rate", 3}}, >> + eq={{"conn_cur", 4}} >> +} >> >> Ar

Re: Clarification re Timeouts and Session State in the Logs

2018-08-23 Thread Daniel Schneller
Friendly bump. I'd volunteer to do some documentation amendments once I understand the issue better :D > On 21. Aug 2018, at 16:17, Daniel Schneller > wrote: > > Hi! > > I am trying to wrap my head around an issue we are seeing where there are > many HTTP 504 responses sent out to clients. >

[PATCH] DOC: Fix spelling error in configuration doc

2018-08-23 Thread Jens Bissinger
Fix spelling error in logging section of configuration doc. --- doc/configuration.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 4e66aad8..6e33f599 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -16414,

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Willy Tarreau
Hi Thierry, On Thu, Aug 23, 2018 at 10:53:15AM +0200, Thierry Fournier wrote: (...) > Ok, it sounds good. I think this kind of syntax is easily understandable > and it allow a good way for filtering values. Does this mean I should merge Adis' patch or do you want to verify other things ? Just let

Re: [PATCH] DOC: Fix spelling error in configuration doc

2018-08-23 Thread Willy Tarreau
On Thu, Aug 23, 2018 at 02:11:27PM +0200, Jens Bissinger wrote: > Fix spelling error in logging section of configuration doc. now applied, thank you! Willy

Re: [PATCH] REGTEST/MINOR

2018-08-23 Thread Willy Tarreau
On Thu, Aug 23, 2018 at 09:01:45AM +0200, Frederic Lecaille wrote: > Hi ML, > > Here are two patches for haproxy reg testing. (...) Applied, thanks Fred! Willy

Re: [PATCH] MEDIUM: lua: Add stick table support for Lua

2018-08-23 Thread Adis Nezirovic
On Thu, Aug 23, 2018 at 03:43:59PM +0200, Willy Tarreau wrote: > Does this mean I should merge Adis' patch or do you want to verify > other things ? Just let me know. Willy, I'll submit new patch later today with simplified filter definitions and then we can ask Thierry for final ack for the patc

stable-bot: NOTICE: 3 bug fixes in queue for next release

2018-08-23 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent periodically once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses t

Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
My plan was to by default terminate SSL and send http traffic to the worker servers on port 88 while traffic with a "ucp.mydomain.com" header would be passed thru as https to the UCP management servers on port 8443. Docker Enterprise Manager nodes insist on seeing incoming commands as https and r

Re: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
Hi. How about to use the following setup. frontend tcp mode tcp bind 443 use_backend default backend default mode http bind 444 ... You can take a look into the openshift router for a more detailed solution. https://github.com/openshift/origin/blob/master/images/router/haproxy/co

RE: Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
Looking at the openshift router definition, I can see it implements what I want: 2. If termination is type 'edge': This is https -> http. Create a be_edge_http: backend. Incoming https traffic is terminated and sent as http to the pods. 3. If termination is type 'reencry

HAProxy dynamic server address based off of variable

2018-08-23 Thread Phani Gopal Achanta
I want to dynamically route to a server by making use of a request variable ssl_fc_sni. Is it possible to configure haproxy server statement to use a variable for server address and/or port? Example backend citest3bk_spice_default server compute1 %[ssl_fc_sni] ssl verify required crt server

Re: HAProxy dynamic server address based off of variable

2018-08-23 Thread Aleksandar Lazic
Hi. First of all i suggest to update the haproxy via rpm https://haproxy.hongens.nl/. I don't think think that's possible but I can be wrong on this. Can't you use dns for this as a name is possible as server address. Regards Aleks Ursprüngliche Nachricht Von: Phani Gopal

RE: Docker Swarm configuration

2018-08-23 Thread Aleksandar Lazic
yes it looks complicated but you only need the edge one as I understood your requirement. TCP -> HTTP only if some name -> else go further with TCP And it's great that this is possible with this software ;-))) Regards Aleks Ursprüngliche Nachricht Von: Norman Brani

RE: Docker Swarm configuration

2018-08-23 Thread Norman Branitsky
Actually items 2 and 3 below are what I want: If hostname "ucp.mydomain.com" then "reencrypt" i.e. https -> https else normal SSL termination - "edge" i.e. https -> http. -Original Message- From: Aleksandar Lazic Sent: Thursday, August 23, 2018 4:30 PM To: Norman Branitsky ; haproxy@for

Re: Clarification re Timeouts and Session State in the Logs

2018-08-23 Thread Igor Cicimov
Hi Daniel, We had similar issue in 2015, and the answer was: server timeout was too short. Simple. On Thu, 23 Aug 2018 9:56 pm Daniel Schneller < daniel.schnel...@centerdevice.com> wrote: > Friendly bump. > I'd volunteer to do some documentation amendments once I understand the > issue better :D

Re: [PATCH] MEDIUM: reset lua transaction between http requests

2018-08-23 Thread Willy Tarreau
Hi Thierry, On Thu, Aug 23, 2018 at 09:37:43AM +0200, Thierry Fournier wrote: > Hi, > > Your patch make sense, that's the right appoach, but I have a doubt about > the place to use for doing the reinitialization. > > I add Willy in this thread in order to have http2 advisor. > > Before the 1.8

[PATCH] BUG/MINOR: lua: Bad HTTP client request duration.

2018-08-23 Thread Frederic Lecaille
Here is a patch to fix the issue reported by Patrick in this thread (BUG: Tw is negative with lua sleep https://www.mail-archive.com/haproxy@formilux.org/msg30474.html). Note that I provide a reg testing file to test both HTTP and TCP LUA applet callbacks used when registering an HTTP or TCP s

Re: [PATCH] BUG/MINOR: lua: Bad HTTP client request duration.

2018-08-23 Thread Frederic Lecaille
On 08/24/2018 08:42 AM, Frederic Lecaille wrote: Here is a patch to fix the issue reported by Patrick in this thread (BUG: Tw is negative with lua sleep https://www.mail-archive.com/haproxy@formilux.org/msg30474.html). Note that I provide a reg testing file to test both HTTP and TCP LUA apple