Re: reqadd srcIP for header

2012-06-04 Thread Chris LeBlanc
Karl, Take a look at...http://code.google.com/p/haproxy-docs/wiki/forwardforYou can also use reqadd which I've done to add ports and protocols like so (thought I'm not sure how you'd get the client ip)…reqadd X-Forwarded-Protocol:\ httpreqadd

Re: reqadd srcIP for header

2012-06-04 Thread Chris LeBlanc
Hey Carl, Is your device sending a http request header. Maybe you can snag the referrer. -- Chris LeBlanc If you see this rotate your iPhone 90° On Jun 4, 2012, at 7:38 PM, Karl Kloppenborg k...@crucialp.com wrote: Hey Chris, Yep I’ve been doing that for a while to make my SSL termination

Re: reqadd srcIP for header

2012-06-05 Thread Chris LeBlanc
hardcoded in the https frontend (and http frontend for consistency). Hope that helps. I know newer versions of haproxy and stunnel are required so double check that. -- Chris LeBlanc On Tuesday, June 5, 2012 at 2:01 AM, Baptiste wrote: well, not adding a header, but getting connected

Sporadic latency issues

2012-06-05 Thread Chris LeBlanc
? -- Chris LeBlanc If you see this rotate your iPhone 90°

Re: Sporadic latency issues

2012-06-07 Thread Chris LeBlanc
:42:46.380] http sld-web-3/sld-web-3 43/0/2/1126/1171 200 3540 - - 9/9/1/1/0 0/0 GET / HTTP/1.1 -- Chris LeBlanc On Wednesday, June 6, 2012 at 12:36 AM, Willy Tarreau wrote: Hi Chris, On Tue, Jun 05, 2012 at 09:54:17PM -0500, Chris LeBlanc wrote: Hey all, Is anyone aware

.landfill after node reboot

2012-06-07 Thread Chris LeBlanc
mechanism to prevent wacko things from happening to your data). For now I copied what was in .landfill locally on one of the nodes so it's just limping along. What should I do? Should I be concern about the data integrity of what's in .landslide? -- Chris LeBlanc

Re: .landfill after node reboot

2012-06-07 Thread Chris LeBlanc
and also how I can prevent this in the future. I admit I didn't have the brick mount in the fstab but even so can we rely on the order the mount points are written in fstab?. -- Chris LeBlanc On Friday, June 8, 2012 at 12:25 AM, Chris LeBlanc wrote: I have a replicated gluster using nfs and one

Re: Dev 11 breaks stick table

2012-06-16 Thread Chris LeBlanc
Am I the only one who read bread sticks on this subject. I must be hungry. :) On Jun 16, 2012, at 4:22 PM, Willy Tarreau w...@1wt.eu wrote: Hi Igor, On Sat, Jun 16, 2012 at 05:13:31PM +0800, Igor wrote: Hi, The configuration below works fine in dev8, but in haproxy-ss-20120607, it

send-proxy build...

2012-06-19 Thread Chris LeBlanc
Hi friends, I have been using the Mojocode repository found here (https://launchpad.net/~mojocode/+archive/ppa/+build/2947499) to install haproxy 1.5dev7. I am now trying to upgrade to Ubuntu Precise and was wondering what's the best way to install haproxy with send-proxy support for

Re: send-proxy build...

2012-06-20 Thread Chris LeBlanc
On Tue, Jun 19, 2012 at 3:16 PM, Chris LeBlanc ch...@blendedby.us wrote: Hi friends, I have been using the Mojocode repository found here (https://launchpad.net/~mojocode/+archive/ppa/+build/2947499) to install haproxy 1.5dev7. I am now trying to upgrade to Ubuntu Precise and was wondering

Can't omit port number using server directive...

2012-06-26 Thread Chris LeBlanc
Hi friends, I'm trying to allow nginx to delegate https properly and one way I see to prevent from having to write a bunch of backends in haproxy is to omit the port number when using the server directive as follows: frontend https bind :81 accept-proxy maxconn 1

Re: Can't omit port number using server directive...

2012-06-27 Thread Chris LeBlanc
:08 PM, Willy Tarreau w...@1wt.eu wrote: Hi Chris, On Wed, Jun 27, 2012 at 12:57:48AM -0500, Chris LeBlanc wrote: Hi friends, I'm trying to allow nginx to delegate https properly and one way I see to prevent from having to write a bunch of backends in haproxy is to omit the port number when

Re: SSL Backends

2012-07-16 Thread Chris LeBlanc
Assuming your ssl terminator (in this case I presume it's nginx) is on the same box as haproxy, haproxy basically is getting unencrypted content. I've not used nginx to do ssl termination but stunnel supports the proxy protocol and passes all of the once encrypted cookie information to haproxy

Re: SSL Backends

2012-07-16 Thread Chris LeBlanc
on the same box, but the backends dont. They are on a totally different network and some people argue that traffic crosses some routers unencrypted. So to be more clear: haproxy gets unencrypted traffic and should encrypt it again. Greetings Stefan On Mon, Jul 16, 2012 at 6:36 PM, Chris

Re: SSL Backends

2012-07-16 Thread Chris LeBlanc
I concur, We don't worry about encrypting traffic that is sent from haproxy to the backends. On Monday, July 16, 2012 at 3:39 PM, Gabriel Sosa wrote: IMHO if you run your servers in a trusted network, **haproxy == stunnel == server** part adds a lot of overhead we do client ==