stats are cut off

behind HAProxy. Don't see anything interesting in the logs.. Any ideas anyone? -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088

stats are cut off

behind HAProxy. Don't see anything interesting in the logs.. Any ideas anyone? -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088

Re: stats are cut off

f the port. Any idea when the 'net/haproxy' port wil be upgraded to 1.3.x? -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet sof

RE: HAProxy not writing to logs.

1505 0.0 0.0 5692 1204 ?? Ss Fri05PM 0:01.72 /usr/sbin/syslogd -a 127.0.0.1:* in my haproxy.conf is: global log 127.0.0.1 local0 notice -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solut

RE: HAProxy and FreeBSD CARP failover

en no backend application server is available for a specific site. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 58

Re: round robin

session cookies? -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg +31 (0)13 5811088 +31 (0)13

Re: round robin

e to do something like storing the sessions in a central db, and identifying users by cookies or something like that, like all big players do). -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist

talking http to a https port

Hey guys, I'm building a solution where I am ssl-offloading some old plain http applications. The http ports are listening on 8001, 8002, 8003, etc. I'm using haproxy 1.8.12 to listen on ports 18001, 18002, 18003, etc. using ssl. Everything works fine, as expected. I am trying to make stuff a bi

RE: dynamic weights based on actual server load

7;t always have control over the backend application) Just my 2 cents. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +3

Re: Perfect sysctl

ndbuf_auto=1 net.inet.tcp.sendbuf_inc=16384 net.inet.tcp.recvbuf_auto=1 net.inet.tcp.recvbuf_inc=524288 net.inet.tcp.inflight.enable=0 net.inet.tcp.hostcache.expire=1 net.inet.ip.portrange.first=1024 net.inet.ip.portrange.last=65535 net.inet.ip.portrange.hifirst=49152 net.inet.ip.portrange.hilast=65535

Re: FreeBSD Ports: bumping haproxy from v1.2.18 -> v1.4.x

acl 'ALL' defined in your config.. You get an error, you google it, and it turns out in 3.x, the acl is already in the system, and hence you cannot define it again in your config. I'm fine with that, as long as the errors are clear ;) -- With kind regards, Angelo Höngens s

RE: log ??

roxy+apache+log+x-forwarded-for (sorry, little time, but this should help you) -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088

Re: haproxy 1.4.1 port crashes

eeper now, but if you need any help let me know, perhaps I can do some tests this week if needed. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism interne

Re: forward proxy ?

er Varnish for stuff like that, it makes tinkering with requests and status codes very easy. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet soft

acls and httpclose

With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg +31 (0)13 5811088 +31 (0)13 5821239 a.hong...@n

Re: question about transparancy

easy, that's why people wrote http balancers :) -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringbaan Oost 2b 501

Re: question about transparancy

On 23-4-2010 11:19, Michiel van Es wrote: > > > Angelo Höngens wrote: >> On 22-4-2010 20:28, Michiel van Es wrote: >>> Yes >>> That is the default smtp failover setup but I want to balance the load >>> via a load balancer setup >>> Mx records

Re: acls and httpclose

me thing, but it is about connection between the clients and haproxy. To me the backend-side and the client-side are two seperate things, which have little to do with eachother. Still, you say "http-server-close is about twice as fast as httpclose". Am I not interpreting things right?

Re: acls and httpclose

On 23-4-2010 21:11, Willy Tarreau wrote: > On Fri, Apr 23, 2010 at 01:14:29PM +0200, Angelo Höngens wrote: >>> My observations are that http-server-close is about twice as fast as >>> httpclose, so you could save about half of the CPU usage here. >>> >>>

Re: Sharing machine or separate machine?

ers attached directly to the net. These balancers have at least 2 network cards, and the 'public' interface only has port 80 open. SSH and other services only listen on the inside interface. In this case you don't really need a firewall to close ports. -- With kind regards, Angelo H

Re: Sharing machine or separate machine?

x27;s for NAT, routing (ipv6) and VPN, and I use my balancers for the rest. The balancers run a combination of haproxy, varnish, squid, apache, whatever fits my requirements. -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business S

Re: Varnish vs HAProxy vs Nginx vs Squid vs Other

functionality. We use haproxy for balancing, because in my opinion it's best at balancing. We use squid for balancing and ssl offloading, and varnish for high-volume caching. see diagram for inspiration: http://files.hongens.nl/2010/05/21/2010_balancers_diagram.pdf -- With kind regards

Re: Varnish vs HAProxy vs Nginx vs Squid vs Other

On 6-7-2010 20:28, Angelo Höngens wrote: > We use haproxy for balancing, because in my opinion it's best at > balancing. We use squid for balancing and ssl offloading, and varnish > for high-volume caching. reply-to-self: I meant squid/varnish for *caching* -- With kind reg

iptables performance impact

ect, I'd be glad to hear it as well. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://www.netmatch.nl --

RE: List of sites using haproxy ?

We use it for www.zoover.nl, www.weeronline.nl, www.snp.nl, etc. (in combination with either squid or varnish caches though). -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan

Re: Force absoluteURI to upstream

ttp://tsung.erlang-projects.org/ > > [2] http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html#sec5.1.2 > Perhaps I don't really understand your problem, when I record a session in tsung it puts the absolute full url in the xml file. -- With kind regards, Ang

RE: HAProxy Stunnel end-to-end SSL

and decrypting. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://

rpms for rhel5?

pdate, includes the right init script for my distro, etc. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239

Re: rpms for rhel5?

On 24-10-2010 21:44, Willy Tarreau wrote: > On Sun, Oct 24, 2010 at 02:05:38PM +0000, Angelo Höngens wrote: >> Hey, does anyone know a place I can find rhel5 rpm's for the latest >> 1.4 releases? The popular repositories all seem to have only 1.3.. >> > > I&#

Re: rpms for rhel5?

On 25-10-2010 10:54, Pasi Kärkkäinen wrote: > You might want to add: --define 'dist .el5' > to your rpmbuild command :) Thanks, that looks better :) http://files.netmatch.nl/RPMS/haproxy-1.4.8-1.el5.x86_64.rpm This building stuff is all quite new to me ;) -- With kind r

Re: rpms for rhel5?

urself. I'd like that, but it seems for RHEL5, haproxy-1.3.25-1 is latest: http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/haproxy.html -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Sma

RE: VM benchmarks

I'm wondering what the difference would be between the standard slow e1000 virtual network card and the fast paravirtualized vmxnet3 virtual network card. In theory, the latter one should be much, much faster.. -- With kind regards, Angelo Höngens Systems Administ

RE: rpms for rhel5?

Great, I'd really like to see 1.4.9 in the rhel5 epel repo :) -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 58

RE: Ipaddr Problems

tes: http://blog.hongens.nl/guides/setting-up-a-pacemaker-cluster-on-centosrhel/ -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F:

RE: haproxy consultant or company to help configure

Brian, If you give some more background info on what the problem is and what needs to be done, perhaps someone will find it an interesting case, and jump in to help you. Angelo. From: B T [mailto:brian...@yahoo.com] Sent: donderdag 4 november 2010 18:50 To: haproxy@formilux.org Subject: hapro

RE: haproxy server ipv6 support

s ipv6-enabled there (and keeping ipv4 around makes things more complex). (for the interested, here are some more of my thoughts on ipv6 and where we are now: http://ipv6.netmatch.nl) I don't need a reaction, just think about it ;) -- With kind regards, Angelo H

RE: Get real source IP

Or you could remove the client's xff header, and always use your own. Then you are sure you can trust your own xff header, and the client can't bypass. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism interne

RE: Get real source IP

Read Willy's response from earlier today, he showed the command.. (I use another product in front of haproxy that removes the header in my case). -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet sof

RE: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

take the extra load. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13 5821239 mailto:a.hong...@netmatch.nl http://

RE: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

in the end we almost always get a perfect 25-25-25-25 balancing. -- With kind regards, Angelo Höngens Systems Administrator -- NetMatch tourism internet software solutions Ringbaan Oost 2b 5013 CA Tilburg T: +31 (0)13 5811088 F: +31 (0)13

Re: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

users you get, the better the balancing :) Here you see a request graph of one of my clusters: http://files.hongens.nl/2011/01/06/varnishrequests.png As you see the distribution is not perfect, but for me it's enough. -- With kind regards, Angelo Höngens systems administrator MCSE o

Re: Haproxy failover: DNS RR vs Virtual IP (heartbeat, keepalived)

log.hongens.nl/guides/setting-up-a-pacemaker-cluster-on-centosrhel/ -- With kind regards, Angelo Höngens systems administrator MCSE on Windows 2003 MCSE on Windows 2000 MS Small Business Specialist -- NetMatch tourism internet software solutions Ringba