Re: Idea for the Wiki

2019-02-19 Thread Willy Tarreau
Hi Baptiste, On Wed, Feb 06, 2019 at 03:55:37PM +0100, Baptiste wrote: > I think one of the most important piece is guide lines on integrating > HAProxy with third parties, IE: Observing HAProxy with influxdb, HAProxy as > a Kubernetes External Load-balancer, Service discovery with consul, and so

Re: %[] in use-server directives

2019-02-19 Thread Willy Tarreau
Hi guys, On Mon, Feb 18, 2019 at 08:20:03PM +0100, William Lallemand wrote: > > > I wonder if there is a way to use %[...] syntax in use-server directives. (...) > Indeed it's not possible to parse a log-format string there. > > However, you can set dynamically the destination IP with 'http-requ

Re: %[] in use-server directives

2019-02-19 Thread Joe K
Hi Willy! My use case is very similar to gitlab's review apps: https://gitlab.com/help/ci/review_apps/index.md, on some PRs I want to be able to start web apps each with its own subdomain which would register themselves with haproxy via a socket like this (I thought): ``` set server be_template/w

Re: %[] in use-server directives

2019-02-19 Thread Willy Tarreau
Hi Joe, On Tue, Feb 19, 2019 at 08:45:48AM +, Joe K wrote: > Hi Willy! > > My use case is very similar to gitlab's review apps: > https://gitlab.com/help/ci/review_apps/index.md, > on some PRs I want to be able to start web apps each with its own subdomain > which would register themselves wi

Re: %[] in use-server directives

2019-02-19 Thread Joe K
I have next to zero experience with C but the commit 702d44f seems to be small enough for me to be able to wrap my head around. I'll try making it work for use-server tomorrow! Thank you! On Tue, Feb 19, 2019 at 8:57 AM Willy Tarreau wrote: > Hi Joe, > > On Tue, Feb 19, 2019 at 08:45:48AM +

Re: %[] in use-server directives

2019-02-19 Thread Willy Tarreau
On Tue, Feb 19, 2019 at 09:14:40AM +, Joe K wrote: > I have next to zero experience with C but the commit 702d44f seems to be > small enough for me to be able to wrap my head around. > > I'll try making it work for use-server tomorrow! Thank you! Ah great, thanks for this! Do not hesitate to

Re: Require info on ACL for rate limiting on per URL basis.

2019-02-19 Thread Jarno Huuskonen
Hi, On Mon, Feb 11, Badari Prasad wrote: >I want to rate limit based on url > [/api/v1/monitoring-event/A01, /api/v1/client1/transfer_data, > /api/v1/client2/transfer_data ] no matter what the source ip address is. Something like this might help you. Unfortunately at the moment I don't

Re: haproxy reverse proxy to https streaming backend

2019-02-19 Thread Thomas Schmiedl
Am 19.02.2019 um 05:29 schrieb Willy Tarreau: Hello Thomas, On Sun, Feb 17, 2019 at 05:55:29PM +0100, Thomas Schmiedl wrote: Hello Bruno, I think the problem is the parsing of the .m3u8-playlist in xupnpd2. The first entry to the .ts-file is 4 hours behind the actual time. But I have no c++ ex

Re: Tune HAProxy in front of a large k8s cluster

2019-02-19 Thread Joao Morais
Hi Willy, > Em 19 de fev de 2019, à(s) 01:55, Willy Tarreau escreveu: > > use_backend foo if { var(req.host) ssl:www.example.com } > This is a nice trick that I’m planning to use with dynamic use_backend. I need to concat host (sometimes ssl_fc_sni) and path. The question is: how do I con

Re: %[] in use-server directives

2019-02-19 Thread Joao Morais
> Em 19 de fev de 2019, à(s) 05:57, Willy Tarreau escreveu: > > In the past it was not possible > to dynamically create servers I think I misunderstood something, but... how do one dynamically create a new server?

Re: %[] in use-server directives

2019-02-19 Thread Bruno Henc
Hi, The following links should be able to help you out: https://www.haproxy.com/blog/dynamic-configuration-haproxy-runtime-api/#dynamically-scaling-backend-servers https://www.haproxy.com/blog/dynamic-scaling-for-microservices-with-runtime-api/#runtime-api You might need to build a developmen

Re: Tune HAProxy in front of a large k8s cluster

2019-02-19 Thread Igor Cicimov
On Wed, 20 Feb 2019 3:39 am Joao Morais Hi Willy, > > > Em 19 de fev de 2019, à(s) 01:55, Willy Tarreau escreveu: > > > > use_backend foo if { var(req.host) ssl:www.example.com } > > > This is a nice trick that I’m planning to use with dynamic use_backend. I > need to concat host (sometimes s

Re: %[] in use-server directives

2019-02-19 Thread Baptiste
On Tue, Feb 19, 2019 at 9:54 PM Bruno Henc wrote: > Hi, > > > The following links should be able to help you out: > > > https://www.haproxy.com/blog/dynamic-configuration-haproxy-runtime-api/#dynamically-scaling-backend-servers > > > https://www.haproxy.com/blog/dynamic-scaling-for-microservices-

Re: Tune HAProxy in front of a large k8s cluster

2019-02-19 Thread Baptiste
I would use a variable instead of a header: http-request set-var(req.myvar) req.hdr(host),concat(,path) Baptiste

Re: RTMP and Seamless Reload

2019-02-19 Thread Erlangga Pradipta Suryanto
Hi Aleksandar, Very sorry for the late reply. I was out of the office. > Ah OBS (=Open Broadcaster Software ?) something like this? Yes, the open broadcaster software, that's the tool that we use in our development environment. > How is in general the error handling of the used SW? The software wi

Re: Require info on ACL for rate limiting on per URL basis.

2019-02-19 Thread Badari Prasad
Hi Jarno and Marco, Thank you for responding. Came up with based on the inputs: #printf "as2monte" | mkpasswd --stdin --method=md5 userlist AuthUsers_MONTE_AS2 user appuser_as2 password $1$t25fZ7Oe$bjthsMcXgbCt2EJvQo8r0/ backend st_src_as2_monte stick-table type string len 64 size 1000

Re: Tune HAProxy in front of a large k8s cluster

2019-02-19 Thread Baptiste
Hi Joao, I do have a question for you about your ingress controller design and the "chained" frontends, summarized below: * The first frontend is on tcp mode binding :443, inspecting sni and doing a triage; There is also a ssl-passthrough config - from the triage frontend straight to a tcp back

Re: Idea for the Wiki

2019-02-19 Thread Baptiste
On Tue, Feb 19, 2019 at 9:36 AM Willy Tarreau wrote: > Hi Baptiste, > > On Wed, Feb 06, 2019 at 03:55:37PM +0100, Baptiste wrote: > > I think one of the most important piece is guide lines on integrating > > HAProxy with third parties, IE: Observing HAProxy with influxdb, HAProxy > as > > a Kuber