stable-bot: Bugfixes waiting for a release 2.0 (55)

2020-06-09 Thread stable-bot
Hi, This is a friendly bot that watches fixes pending for the next haproxy-stable release! One such e-mail is sent periodically once patches are waiting in the last maintenance branch, and an ideal release date is computed based on the severity of these fixes and their merge date. Responses

Re: SMTP error : TLS error on connection (recv): The TLS connection was non-properly terminated. due to haproxy in the middle

2020-06-09 Thread Jonathan Matthews
Without wishing to second guess your operational setup, are all of those services (client machines, haproxy, anti-spam boxes) on your network i.e. do they *need* TLS? Given the insecure nature of email, and the lack of guarantees which you (or anyone) can make about subsequent point-to-point

Re: crashes with 2.0.14

2020-06-09 Thread Sander Hoentjen
Just created an issue now: https://github.com/haproxy/haproxy/issues/671 Thanks, Sander On 6/9/20 2:07 PM, Илья Шипицин wrote: it is a good report. backtraces are very useful is there github issue filled for it ? if no, can you please create one ? I hope, it won't be lost that way вт, 9 июн.

SMTP error : TLS error on connection (recv): The TLS connection was non-properly terminated. due to haproxy in the middle

2020-06-09 Thread Brent Clark
Good day Guys I was hoping I can pick you brain and ask for your help. If any can help and share pointers, it would gratefully be appreciated. Where I work, we just inherited a series of third party out going spam servers. For various reason, we need to loadbalance but more importantly direct

Re: Rate Limit per IP with queueing (delay)

2020-06-09 Thread Stefano Tranquillini
I may have found a solution, that's a bit more elegant (to me) The idea is to use a lua script to do some weighted sleep depending on data. the question is: "is this idea good or bad"? especially, will the "core.msleep" have implications on performance for everybody? If someone uses all the

Re: crashes with 2.0.14

2020-06-09 Thread Илья Шипицин
it is a good report. backtraces are very useful is there github issue filled for it ? if no, can you please create one ? I hope, it won't be lost that way вт, 9 июн. 2020 г. в 15:13, Sander Hoentjen : > Is there anybody with a clue? If I need to supply more info I can do so, > of course. > >

Re: [PATCH v2] MINOR: Add secure_memcmp converter

2020-06-09 Thread Willy Tarreau
On Tue, Jun 09, 2020 at 11:48:42AM +0200, Tim Duesterhus wrote: > > I think that instead it could be done slightly differently, by using > > CRYPTO_memcmp() when openssl is present or memcmp() when not, and > > documenting that the constant time is enforced when haproxy is compiled > > I don't

Re: Rate Limit per IP with queueing (delay)

2020-06-09 Thread Stefano Tranquillini
Hello, i didn't really get what has been changed in this example, and why. On Tue, Jun 9, 2020 at 9:46 AM Igor Cicimov wrote: > Modify your frontend from the example like this and let us know what > happens: > > frontend proxy > bind *:80 > stick-table type ip size 100k expire 15s store

Re: Rate Limit per IP with queueing (delay)

2020-06-09 Thread Igor Cicimov
On Tue, Jun 9, 2020 at 6:48 PM Stefano Tranquillini wrote: > Hello, > i didn't really get what has been changed in this example, and why. > > On Tue, Jun 9, 2020 at 9:46 AM Igor Cicimov < > ig...@encompasscorporation.com> wrote: > >> Modify your frontend from the example like this and let us

Re: Rate Limit per IP with queueing (delay)

2020-06-09 Thread Stefano Tranquillini
If both users have the same IP then there's a problem, however, if the IPs are different nginx auto-limits the request per minute to the value given. i would like to achieve the same functionality in HA, or have a way to cap the number of calls per IP (or user or whatever) to a certain number. I

[no subject]

2020-06-09 Thread Stefan Scheglmann
unsubscribe -- Kind regards, Stefan Scheglmann PAAS Developer E-mail scheglm...@strato.de Website www.strato.com STRATO AG | Pascalstraße 10 | 10587 Berlin | Germany The mandatory information can be found here https://www.strato-hosting.co.uk/imprint/

[ANNOUNCE] haproxy-2.1.7

2020-06-09 Thread Christopher Faulet
Hi, HAProxy 2.1.7 was released on 2020/06/09. It added 1 new commits after version 2.1.6. Only one day after the previous release, this one comes to fix a very annoying bugs on errorfiles. The copy of errorfiles from a defaults section to a frontend or a backend was not properly performed,

Re: Rate Limit per IP with queueing (delay)

2020-06-09 Thread Igor Cicimov
Modify your frontend from the example like this and let us know what happens: frontend proxy bind *:80 stick-table type ip size 100k expire 15s store http_req_rate(10s) http-request track-sc0 src table Abuse use_backend api_delay if { sc_http_req_rate(0) gt 30 } use_backend

[PATCH v2] MINOR: Add secure_memcmp converter

2020-06-09 Thread Tim Duesterhus
Willy, Am 09.06.20 um 05:14 schrieb Willy Tarreau: >> memcmp compares two binary strings in constant time. > > (...) > > I'd say that the name is quite misleading if you want to enforce the > constant time requirement, because memcmp() is well known and initially > I didn't understand the

Re: crashes with 2.0.14

2020-06-09 Thread Sander Hoentjen
Is there anybody with a clue? If I need to supply more info I can do so, of course. Kind regards, Sander On 6/2/20 4:12 PM, Sander Hoentjen wrote: Hi list, Some time ago (around april 21st) we were using 1.8.13 and we switched from nbthread = 1 to nbthread = 4 This seemed stable for us,