[PR] Corrected Typo

2019-07-08 Thread PR Bot
Dear list! Author: Rajesh Rajendran Number of patches: 1 This is an automated relay of the Github pull request: Corrected Typo Patch title(s): Corrected Typo Link: https://github.com/haproxy/haproxy/pull/160 Edit locally: wget https://github.com/haproxy/haproxy/pull/160.patch &&

Re: Proof of concept SPOE based SSO solution

2019-07-08 Thread Igor Cicimov
On Fri, Jul 5, 2019 at 11:12 AM Andrew Heberle wrote: > Hi All, > > I have put together a Go based proof of concept SPOE agent that also > implements a SAML 2 Service Provider (SP) in order to do "SSO" in > HAProxy. > > The code is located here: > >

Re: [PATCH v2] BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2

2019-07-08 Thread Willy Tarreau
On Mon, Jul 08, 2019 at 02:29:15PM +0200, Lukas Tribus wrote: > Commit 54832b97 ("BUILD: enable several LibreSSL hacks, including") > changed empty handshake detection in OpenSSL <= 1.0.2 and LibreSSL, > from accessing packet_length directly (not available in LibreSSL) to > calling SSL_state()

Re: haproxy inappropriately sending rst_stream on http/2

2019-07-08 Thread Willy Tarreau
Hi Patrick, On Mon, Jul 08, 2019 at 05:48:26PM -0400, Patrick Hemmer wrote: > So I sent the information to Willy, but I'm guessing he's occupied with > other things as I haven't heard back (which is perfectly fine, this is an > open source project with no support contract after all). Oh sorry,

Re: global maxconn behaviour in haproxy2.0

2019-07-08 Thread Willy Tarreau
On Wed, Jul 03, 2019 at 01:30:52PM +, William Dauchy wrote: > On Wed, Jun 26, 2019 at 11:29:47AM +1000, Igor Cicimov wrote: > > Those maxconn values are per frontend so if your backend is referenced by > > two frontends you might end up with a limit of 2 x maxconn on the backend. > > Hence it

Re: DOC: Suggest to replace the netstat commands

2019-07-08 Thread Patrick Hemmer
*From:* Alain Belkadi [mailto:xigu...@linuxbeach.be] *Sent:* Monday, July 8, 2019, 10:51 EDT *To:* haproxy@formilux.org *Subject:* DOC: Suggest to replace the netstat commands Hello, As the "netstat" command is

Re: 1.9 external health checks fail suddenly

2019-07-08 Thread Lukas Tribus
Hello, On Mon, 1 Jul 2019 at 12:27, Lukas Tribus wrote: > > > Sometimes (infrequently) all external checks hang and time out: > > > * Has happened with versions 1.9.4 and 1.9.8 on multiple servers with > > > nbproc 1 and nbthread set to (4-12) depending on server. > > > * Happens infrequently,

DOC: Suggest to replace the netstat commands

2019-07-08 Thread Alain Belkadi
Hello, As the "netstat" command is deprecated since a long time (1), I suggest to replace it with other commands like ss and ip. I've made a first patch for this. As the number of columns is higher than the 80 standard, I've made a second patch with less long lines ... but that don't fit

July 8, 2019 - GCPL Chairman Adi Godrej's FY19 remuneration 114-times higher than firm's median pay

2019-07-08 Thread TradeBriefs

Re: prometheus service kills ssl handshake

2019-07-08 Thread Aleksandar Lazic
Hi Christopher. Am 08.07.2019 um 10:30 schrieb Christopher Faulet: > Le 06/07/2019 à 23:02, Aleksandar Lazic a écrit : >> Hi. >> >> I use HAP 2.0.1 with haproxy service with my image. >> After some times (~several hours) the ssl handshake stops working for the >> https >> frontend which offers

Re: prometheus service kills ssl handshake

2019-07-08 Thread Christopher Faulet
Le 06/07/2019 à 23:02, Aleksandar Lazic a écrit : Hi. I use HAP 2.0.1 with haproxy service with my image. After some times (~several hours) the ssl handshake stops working for the https frontend which offers the prom service. The config is mainly the same as showing at the blog post

Fix typo in management.txt

2019-07-08 Thread Alain Belkadi
Hello, I've found a little typo in management.txt Regards, -- [Alain Belkadi / LinuxBeach]From b62365ce6c78157a1efd23ad4a150434fbe473d9 Mon Sep 17 00:00:00 2001 From: Alain Belkadi Date: Mon, 8 Jul 2019 11:09:54 +0200 Subject: [PATCH] [DOC] Fix typo in management.txt --- doc/management.txt

Re: Send-proxy not modifying some traffic with proxy ip/port details instead retaining same client ip port

2019-07-08 Thread Lukas Tribus
For the record: this was not a haproxy bug, but turned out to be a kernel/conntrack thing. Disabling nf_conntrack_tcp_loose fixes this: https://www.spinics.net/lists/netdev/msg546371.html cheers, lukas

Re: question about spoe doc

2019-07-08 Thread Aleksandar Lazic
Hi. Am 05.07.2019 um 15:28 schrieb Christopher Faulet: > Le 03/07/2019 à 11:03, Aleksandar Lazic a écrit : >> Hi. >> >> in the spoe doc in section **2.5. Example** are the following lines. >> >> ``` >>   620 spoe-message get-ip-reputation >>   621 args ip=src >>   622 event

Re: Get http connection client/server ip/port

2019-07-08 Thread Lukas Tribus
Hello, as confirmed in the github issue and for the record here as well (so that we have the solution in the archives): This is not a haproxy bug, but turned out to be a kernel/conntrack thing. Disabling nf_conntrack_tcp_loose fixes this: https://www.spinics.net/lists/netdev/msg546371.html

Re: haproxy inappropriately sending rst_stream on http/2

2019-07-08 Thread Patrick Hemmer
*From:* Patrick Hemmer [mailto:hapr...@stormcloud9.net] *Sent:* Wednesday, June 26, 2019, 08:06 EDT *To:* haproxy@formilux.org *Subject:* haproxy inappropriately sending rst_stream on http/2 I'm running haproxy 1.9.8 and

DOC: Fix typo in management.txt

2019-07-08 Thread Alain Belkadi
Hello, A fix for a typo in §3. Regards, -- [Alain Belkadi / LinuxBeach]From 35c31e13d5b8c87f1781674c7a6434cda50716c1 Mon Sep 17 00:00:00 2001 From: Alain Belkadi Date: Mon, 8 Jul 2019 14:12:16 +0200 Subject: [PATCH] DOC: Fix a typo in management.txt --- doc/management.txt | 2 +- 1 file

Replace deprecated reqrep

2019-07-08 Thread Artur
Hello, Could you please suggest how to rewrite following rules written with 'regrep' with 'http-request replace-uri' : frontend www  reqrep ^([^\ ]*)\ /p3/js/(.*) \1\ /p3/js-min/\2 The idea is to rewrite something similar to "GET /p3/js/file.js HTTP/1.1" with  "GET /p3/js-min/file.js HTTP/1.1".

[PATCH v2] BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2

2019-07-08 Thread Lukas Tribus
Commit 54832b97 ("BUILD: enable several LibreSSL hacks, including") changed empty handshake detection in OpenSSL <= 1.0.2 and LibreSSL, from accessing packet_length directly (not available in LibreSSL) to calling SSL_state() instead. However, SSL_state() appears to be fully broken in both OpenSSL

Re: [PATCH v2] BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2

2019-07-08 Thread Илья Шипицин
Nice On Mon, Jul 8, 2019, 5:30 PM Lukas Tribus wrote: > Commit 54832b97 ("BUILD: enable several LibreSSL hacks, including") > changed empty handshake detection in OpenSSL <= 1.0.2 and LibreSSL, > from accessing packet_length directly (not available in LibreSSL) to > calling SSL_state() instead.

Re: Replace deprecated reqrep

2019-07-08 Thread Tim Düsterhus
Artur. Am 08.07.19 um 14:25 schrieb Artur: > Hello, > > Could you please suggest how to rewrite following rules written with > 'regrep' with 'http-request replace-uri' : > > frontend www >  reqrep ^([^\ ]*)\ /p3/js/(.*) \1\ /p3/js-min/\2 > > The idea is to rewrite something similar to "GET

CPU Spikes

2019-07-08 Thread Sander Klein
Hi, I'm having an issue with HAProxy causing CPU spikes with certain traffic. We have a client who is downloading lots of URL's during the night. When the download starts there is not much other traffic going on and there doesn't seem to be any problem. But, when the morning comes, 'normal'

DOC: Fix typo in management.txt

2019-07-08 Thread Alain Belkadi
Hello, An another patch for a typo in management.txt Regards, -- [Alain Belkadi / LinuxBeach]From 492a84aa7f25444b89e5224a5cf015a8e12fb683 Mon Sep 17 00:00:00 2001 From: Alain Belkadi Date: Mon, 8 Jul 2019 14:27:10 +0200 Subject: [PATCH] DOC: Fix a typo in management.txt ---