Re: DNS Load balancing needs feedback and advice.

2020-11-06 Thread Willy Tarreau
Hi Lukas, On Thu, Nov 05, 2020 at 06:40:50PM +0100, Lukas Tribus wrote: > What I don't like are code/subsystems that are not sufficiently > covered maintenance- and maintainer-wise (whatever the reason may be). > > In my opinion, the resolver code is like that today: > > - issues (including

Re: Backport ssl_{c,s}_chain_der to 2.2 ?

2020-11-06 Thread Christopher Faulet
Le 06/11/2020 à 11:46, Ionel GARDAIS a écrit : Thanks Willy and the team for releasing 2.3 ! Is ssl_{c,s}_chain_der fetch planned to be backported to 2.2 ? Not planned but small enough to be done. Now backported :) -- Christopher Faulet

[ANNOUNCE] haproxy-2.0.19

2020-11-06 Thread Christopher Faulet
Hi, HAProxy 2.0.19 was released on 2020/11/06. It added 38 new commits after version 2.0.18. The changelog is very similar than the ones for the 2.2.5 and 2.1.10, excluding not backported fixes. Please see 2.2.5 announcement for the details. However, thanks to a last minute change, there is a

Backport ssl_{c,s}_chain_der to 2.2 ?

2020-11-06 Thread Ionel GARDAIS
Thanks Willy and the team for releasing 2.3 ! Is ssl_{c,s}_chain_der fetch planned to be backported to 2.2 ? Ionel -- 232 avenue Napoleon BONAPARTE 92500 RUEIL MALMAISON Capital EUR 219 300,00 - RCS Nanterre B 408 832 301 - TVA FR 09 408 832 301

Re: [*EXT*] Re: Backport ssl_{c,s}_chain_der to 2.2 ?

2020-11-06 Thread Ionel GARDAIS
Thanks Christopher ! -- Ionel - Mail original - De: "Christopher Faulet" À: "Ionel GARDAIS" , "haproxy" Envoyé: Vendredi 6 Novembre 2020 12:09:07 Objet: [*EXT*] Re: Backport ssl_{c,s}_chain_der to 2.2 ? Le 06/11/2020 à 11:46, Ionel GARDAIS a écrit : > Thanks Willy and the team for

[ANNOUNCE] haproxy-1.8.27

2020-11-06 Thread Amaury Denoyelle
Hi, HAProxy 1.8.27 was released on 2020/11/06. It added 44 new commits after version 1.8.26. Every 1.8 users are encouraged to upgrade as it contains several bug fixes. This release contains some fixes also present on higher versions. Most notably a fix on the h2 multiplexer, a thread-safety bug

[PATCH] switch from HA_OPENSSL_VERSION to well known macros

2020-11-06 Thread Илья Шипицин
Hello, yet another patch. Ilya From 39173d569cfc3559a9293b40be958e683193fd05 Mon Sep 17 00:00:00 2001 From: Ilya Shipitsin Date: Fri, 6 Nov 2020 18:46:45 +0500 Subject: [PATCH] BUILD: ssl: more elegant OpenSSL early data support check Let us change that feature detction to

Re: [PATCH] switch from HA_OPENSSL_VERSION to well known macros

2020-11-06 Thread Илья Шипицин
sorry, I sent a patch with typo. please ignore it. пт, 6 нояб. 2020 г. в 18:49, Илья Шипицин : > Hello, > > yet another patch. > > Ilya >

Re: [ANNOUNCE] haproxy-2.3.0

2020-11-06 Thread William Lallemand
On Thu, Nov 05, 2020 at 07:20:46PM +0100, Willy Tarreau wrote: > Hi, > > HAProxy 2.3.0 was released on 2020/11/05. It added 33 new commits after > version 2.3-dev9. I was right to wait a few more days before releasing, > we could spot two late regressions and fix them in time! > Hi, The

Re: [2.0.17] crash with coredump

2020-11-06 Thread Kirill A. Korinsky
Hey, I'm wondering, does it related to this code: + /* some tasks may have woken other ones up */ + if (max_processed && thread_has_tasks()) + goto not_done_yet; + from

Re: [2.0.17] crash with coredump

2020-11-06 Thread Willy Tarreau
Hi Kirill, On Fri, Nov 06, 2020 at 06:41:03PM +0100, Kirill A. Korinsky wrote: > Hey, > > I'm wondering, does it related to this code: > > + /* some tasks may have woken other ones up */ > + if (max_processed && thread_has_tasks()) > + goto not_done_yet; > + (...) > as

Multiplexing FastCGI Connections

2020-11-06 Thread Harris Kaufmann
Hi everyone, I wanted to try the FastCGI multiplexing feature, but whatever I do HAProxy never sends multiple requests simultaneously over the same backend connection. This is my configuration: -- defaults mode http

Re: [2.0.17] crash with coredump

2020-11-06 Thread Willy Tarreau
Maciej, I wrote this ugly patch to try to crash as soon as possible when a corrupt h2s->subs is detected. The patch was written for 2.2. I only instrumented roughly 30 places in process_stream() which is a fairly likely candidate. I just hope it happens within the context of the stream itself