Question about source IP persistence (balance source) when a server goes down:

their session? (i..e hit the wrong server because the hash has changed) -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: I Finally got HAProxy TPROXY working so wrote a blog entry howto

Willy, Just to confirm that I'm using server backup 127.0.0.1:80 backup source 0.0.0.0 instead of server backup 127.0.0.1:80 backup and it works fine now, thanks. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: A patch for haproxy 1.3.15.7 (HTTP-ECV)

! FinalBSD -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Just a small inconsistency in the docs for listening on multiple ports?

issue but just wanted to check) Ps. forgot to mention I have patched with the request/receive health check posted earlier but I don't think thats the issue. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Transparent proxy

me examples? Thanks, Carlo -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Troubleshoot Starting proxy http_proxy: cannot bind socket

start Starting HAproxy: [ALERT] 161/110810 (22011) : Starting proxy http_proxy: cannot bind socket                                                           [FAILED] -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

kernel: Neighbour table overflow?

: printk: 156 messages suppressed. Jun 19 11:26:53 lbmaster kernel: Neighbour table overflow. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Transparent proxy of SSL traffic using Pound to HAProxy backend patch and howto

://www.loadbalancer.org/download/PoundSSL-Tproxy/poundtp-2.4.5.tgz Willy, You mentioned that it may be more sensible to do something like: source 0.0.0.0 usesrc hdr(x-forwarded-for) rather than having 2 sets of TPROXY set up.. but I don't think this is possible yet? -- Regards, Malcolm

Question relating to the errors show on the HAProxy stats screen and 503 errors.

this option reduce the number of 503 errors? -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: We have been playing around with the new RDP cookie feature in 1.4-dev4 and it works really well...

a wakeup ? Thanks for sharing this ! Guillaume Malcolm Turnbull a écrit : We have been playing around with the new RDP cookie feature in 1.4-dev4 and it works really well... One of our guys Nick has written a blog about his configuration and testing of Windows Terminal Servers with Windows

Can HAProxy work around a PSP3 and IIS7 issue?

allow the first one?) Thanks in advance. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

SNMP for latest HAProxy version...?

= 'Memmax_MB', 9 = 'Ulimit-n', 10 = 'Maxsock', 11 = 'Maxconn', 12 = 'CurrConns', ); Has anyone already done this? Perl is not my strong point :-). thanks. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779

Re: SNMP for latest HAProxy version...?

is not my strong point :-). Yes, haproxy.pl-0.27 + haproxy-1.4 works. Best regards, Krzysztof Olędzki -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

RDP cookies with balance leastconn?

. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

unsubscribe

unsubscribe

Re: How to achieve application driven load balancing scheme using HAProxy?

logins starting with 'a' 4) All servers in each shard use same database/storage/memchached to handle just the users starting with 'a' etc... Should give fairly unlimitted scaleability? I notice my googlemail client is doing it right now: mail.google.com/a/loadbalancer.org -- Regards, Malcolm

Any chance of a brief introduction and example of the new PROXy protocol?

did trawl through the 1.5 docs, but couldn't seem to spot it... -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Quick question where the answer is probably no :-).

Bye -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: [RFC] Thinking about RDP-cookie

... How would you insert the marker in standard TCP traffic? The only method I'm aware of is source IP for TCP persistence. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Can you do a HTTPS redirect to multiple sub domains?

individual entry? acl foo1 hdr dev-1.foo.com if acl foo1 -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

HAproxy can't seem to bind to more than 1000 ports?

) Thanks. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: HAproxy can't seem to bind to more than 1000 ports?

On 15 February 2011 22:23, Willy Tarreau w...@1wt.eu wrote: Hi Malcolm, On Tue, Feb 15, 2011 at 08:35:05PM +, Malcolm Turnbull wrote: HAproxy can't seem to bind to more than 1000 ports? (well about 1017 which is suspiciously close to 1024...) I'm probably being really stupid but I

Re: SSL read failed - closing connection during benchmarking haproxy SSL

HTTPPerf instead (which works). Let me know if you get ab working though please! -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Stick on src defaults to option persist?

on pattern [table table] [{if | unless} condition not in maintenance mode... -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Is their a way of getting number of sessions/connections even when you are using force close?

may be: 5 So my question Is can you get actual connections/users per server i.e. find out if: Server1 = 48 Server2 = 52 ? And as a side question does leastconns use the value of 5 or 50 ? i.e. what time period does leastconns use? Thanks in advance. -- Regards, Malcolm Turnbull

Re: HAProxy Session affinity for PHP web application

;) -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: State sync

- jnebr...@eneotecnologia.com Consultor TI - ENEO Tecnologia SL C/ Manufactura 2, Edificio Euro, Oficina 3N Mairena del Aljarafe - 41927 - Sevilla Telf.- 955 60 11 60 / 619 04 55 18 -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: State sync

). -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Re[2]:

then the OOM killer will be invoked (but swap will only slow down the system even more and then die, at least OOM has a small chance to take out the offending process..) -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Does haproxy support wccp(Web Cache Communication Protocol) ?

suppors wccp, but i don't know if haproxy support.    Because i didn't find any infomations about the wccp on haproxy, so i think you can give me a good answer!     Thank you very much!! Regards, YueQiang -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0

Re: Automate backend registration

appreciate hint where I can find tools or whats the current state to handle this kind of task. Cheers, Jens -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Transparent Proxy

to the backend servers? Thank you in advance. -J -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re:

servers). So my question may come down to: Can HAProxy route to servers not predefined in the initial configuration? I can easily imagine an implementation that could handle this, but wanted to ask if HAProxy already does this. Thanks in advance -- Langley -- Regards, Malcolm Turnbull

Re: observe layer7 acceptable response codes

And now I've re-read the section about what observe layer 7 actually does so I am almost certainly talking rubish On 7 March 2012 21:29, Malcolm Turnbull malc...@loadbalancer.org wrote: Jonathan, Correct me if I'm wrong but: The httpchk is sourced from HAProxy as an application level

Re: Using haproxy for tcp-port forwarding/mapping

is going through there as well. I'm using balance src so I'm not that fussed about sessions or state at this point. Any info or pointers are much appreciated. Timh Bergström www.quickvz.com -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http

Re: HAProxy Hardware LB

ATOM boards or something similiar? Can someone recomment anything special? Best regards Sebastian -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Using set weight to automate auto weight setting based on backend loading

. ii. A list of patches and implementation overview via email to LoadBalancer.Org So well, how about controlling weight via service checks? cheers thomas -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: [PATCH 5/5] dynamic health check

Willy. Yes. That sounds good to me. Thanks. And have a nice Christmas... On 24 December 2012 09:23, Willy Tarreau w...@1wt.eu wrote: Hi Malcolm, On Mon, Dec 24, 2012 at 09:06:25AM +, Malcolm Turnbull wrote: Willy / Simon, I'm very happy to add a down option, my original thought

Re: Suggested 10GB card?

be the network card that is suggested to put into the hosts? I have seen a post that say the ixgbe driver is difficult to configure and am wonder what card/driver would not be difficult. Troy Klein -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http

If anyone is interested in testing Simon Hormans patches for the server feedback agent

... -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: agent-port / loadbalance with CPU usage

the agent-port feature. I want new connection to always go to the server with the lowest CPU usage, which balancing algorithm should i use to achieve this? thanx, Sebastien Estienne -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: rdp cookie

time out. Vaibhav Pol National PARAM Supercomputing Facility Centre for Development of Advanced Computing Ganeshkhind Road Pune University Campus PUNE-Maharastra -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: [PATCH v6 00/22] Agent Check Enhancements and External Check

that Simon has been working on. And yes, we'd all benefit from the new version ! Willy -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Is it possible to view the contents of a stick table on a running HAProxy 1.5 instance?

different target servers for the same stick on value. I was hoping I could view the contents of the stick tables on both nodes so I could troubleshoot this. Cheers Duncan -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Health check hell

maintenance mode. But again this is not really a priority with us as you say it clashes with the CLI DRAIN logic On 2 December 2013 14:30, Willy Tarreau w...@1wt.eu wrote: Hi Simon, thank you for your response, I felt a little bit alone :-) -- Regards, Malcolm Turnbull

Re: Health check hell

Forgot to reply to all: Willy, This looks good to me and make sense. Long term it will be more flexible this way. On 4 December 2013 18:17, Willy Tarreau w...@1wt.eu wrote: Hi Malcolm, On Wed, Dec 04, 2013 at 03:05:41PM +, Malcolm Turnbull wrote: Hi Willy, Sorry for the lack

Re: example of agent-check ?

-%CPUusage and sending that 1on1 back to the agent on a server with 99% cpu capacity available wont come back up.. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Just a simple thought on health checks after a soft reload of HAProxy....

it passes a health check? -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: Just a simple thought on health checks after a soft reload of HAProxy....

in 0ms, which is what I expect to see. -Patrick -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: weights

the difference between *concurrent* connections and *cumulated* connections. You're measuring the number of connections distributed over time. I'm talking about concurrent connections, which is what leastconn is about. Willy -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44

Re: Spam

IS NO ISSUE. Unless it is so bad it is wearing your delete key out. Seriously, there are other things to complain about. Thank you for confirming my beliefs Kobus :-) Willy That¹s anecdotal evidence. LOL! -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http

Re: SSL hardware acceleration

Registergericht Berlin-Charlottenburg Geschaeftsfuehrung: Jens Begemann, Philipp Moeser -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)870 443 8779 http://www.loadbalancer.org/

Re: [PATCH v7 0/3] MEDIUM: Add external check

, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: HAProxy - Load Balancing + GeoIP

it out at http://www.inbox.com/marineaquarium -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: Problem with external healthchecks and haproxy-ss-20140720

as well would be nice.) On 15 August 2014 08:11, Simon Horman ho...@verge.net.au wrote: [Cc Malcolm Turnbull] On Fri, Aug 15, 2014 at 12:29:36AM +0200, Willy Tarreau wrote: Hi Cyril! On Thu, Aug 14, 2014 at 10:30:52PM +0200, Cyril Bonté wrote: Hi all, Le 07/08/2014 01:16

Re: connections to HaP

, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Just had a thought about the poodle issue....

browser chrome or firefox etc? Is that easy to do? -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: Just had a thought about the poodle issue....

Doh! I'm getting old... thanks :-). On 18 October 2014 15:37, David Coulson da...@davidcoulson.net wrote: You mean like this? http://blog.haproxy.com/2014/10/15/haproxy-and-sslv3-poodle-vulnerability/ On 10/18/14, 10:34 AM, Malcolm Turnbull wrote: I was thinking Haproxy could be used

Can I insert a prefix cookie rather than read an existing one?

using cookie SERVERID for the persistence? Or using a big IP stick table even though all the IPs will be the same? Or am I just being really stupid today , which is not unusual :-). Thanks in advance. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http

Re: Can I insert a prefix cookie rather than read an existing one?

, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: Better understanding of nbproc vs distributing interrupts for cpu load management

on which it runs and will saturate them (even though the overall average looks good). Can anybody comment on this approach as our team member is convinced he has a silver bullet for performance. Many thanks for any help/insight into this! -- Regards, Malcolm Turnbull. Loadbalancer.org

Re: Stop new connections from hitting nodes

ways of stopping *new* connections from hitting backend nodes? -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: Complete rewrite of HAProxy in Lua

Ok. My immediate thought was.. Oh crap we are going to have to fork haproxy and hire loads of C developers! Then when someone mentioned what day it was I felt incredible relief :-). Nice joke. Well executed. On 1 Apr 2015 10:06, Baptiste bed...@gmail.com wrote: I'll have to find a way to code

Re: Agent-check not working with backend HTTPS

Claudio, What does a tcpdump on port 4321 tells you? and what type of content do you see from the server to haproxy in the packet captured? Baptiste -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: [PATCH 1/2] MEDIUM: Only report drain state in stats if server has SRV_ADMF_DRAIN set

this first (eg: by using a function to get the color to report and another one to report the description). If your patch maintains the blue line for weight==0, then please ignore my comment above. Best regards, Willy -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330

Re: SPICE Proxy with haproxy

172.20.69.21:5900-6123 weight 10 server OVIR2 172.20.69.22:5900-6123 weight 10 But it seems I can't set a port range in the server directive. Somebody have an idea how can I setup ? Thanks a lot -- Kevin -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0

Re: SSL and Piranha conversion

and software at the > same time, both whilst under pressure? It will be massively simpler to > install your preexisting choice of (known "good") software on your new > hardware. > > Jonathan -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 1604540 http://www.loadbalancer.org/

Re: SSL and Piranha conversion

; Malcolm, > The Piranha gui had some configurations about Virtual IPs and I am > not sure how that works or how it is different than HAProxy. The firewall > had some rules that pointed website requests to the virtual ips. > > Daniel > -Original Message---

Re: TCP connections rdp

t; persist rdp-cookie > stick-table type string size 204800 > stick on req.rdp_cookie(mstshash) > server srv1 10.240.0.3:3389 > server srv2 10.240.0.4:3389 > > > 2015-11-20 5:38 GMT-02:00 Malcolm Turnbull <malc...@loadbalancer.org>: >> >> Dou

Re: TCP connections rdp

h loadbalancer: loadbalancer > > 2015-11-20 9:17 GMT-02:00 Malcolm Turnbull <malc...@loadbalancer.org>: >> >> Douglas, >> >> I'm a bit confused on the question but an example Session Broker >> Config would be: >> >> listen Test >> bind 192.168.64

Re: SSL acceleration

are not the intended recipient, >> please contact the sender immediately and permanently delete the original >> and any copies of this email and any attachments thereto. > -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone: +44 (0)330 380 1064 http://www.loadbalancer.org/

Re: Getting JSON encoded data from the stats socket.

wondered if we could start a discussion about the possibility of >> having the stats socket return stats data in JSON format. > > After the discussion we had in July, I'm wondering what's the current > status regarding this topic? > > Thanks and all the best, > Georg -- Rega

Would you be interested in helping us integrate Alexa voice control into HAProxy?

/5988 https://www.loadbalancer.org/products/hardware/enterprise-val Its awesome, 92.3% of the time it does exactly what you ask and you can also control the office music with it! I hope you are as excited as I am by the possibilities. -- Regards, Malcolm Turnbull. Loadbalancer.org Ltd. Phone

Any more detail on the plan for multi-threading and or multi-process support?

code. Sorry if this has already been discussed and I missed the conversation. -- Regards, Malcolm Turnbull Loadbalancer.org Ltd. +44 (0)330 380 1064

Re: Reverse Gateway Throught Security Zones

people are constantly trying to 'work around the DMZ' rather than just getting rid of them. And don't get me started on bridges: https://www.loadbalancer.org/blog/transparent-vs-explicit-proxy-which-method-should-i-use#bridge-mode Malcolm Turnbull Loadbalancer.org Ltd. www.loadbalancer.org +44

Re: Scaling HAProxy over multiple cores with session stickyness

Peter, If you can use cookies then don't use session cookies with a stick table - just put the SERVERID in the cookie: i.e. cookie SERVERID insert indirect nocache That will work fine with NBPROC >1 Or if you really want a stick table then move the IRQ to a different core(s) than the HAProxy

Re: WAF with HA Proxy.

e do at Loadbalancer.org[2]) [1] https://www.haproxy.com/blog/scalable-waf-protection-with-haproxy-and-apache-with-modsecurity/ [2] https://www.loadbalancer.org/blog/blocking-invalid-range-headers-using-modsecurity-and-haproxy-ms15-034-cve-2015-1635/ Malcolm Turnbull Loadbalancer.org Ltd. www.loadbalancer.org

Re: Haproxy client ip

Daniel, Yes, That's expected :-). It normally scares me when people say they are going to use TPROXY... It's awesome but needs a bit of thought to implement properly. This blog may help, it's a bit old, so ignore the Kernel stuff - you don't need it any more:

Just a quick update on our Windows Feedback Agent-Check for HAProxy

just build a custom agent by hand (it's not hard...), I've heard of Herald: https://medium.com/helpshift-engineering/herald-haproxy-load-feedback-and-check-agent-1b8749a13f02 Does anyone know of any other options for server-side agents? Thanks, Malcolm Turnbull Loadbalancer.org Ltd

Re: New Open source SNMP MIB and agent for HAProxy:

Willy, Thanks for that tip, sounds like a really good idea. I talked to Pete and he's added it to the list for the next version along with: Code clean ups, 64 bit values, reading settings from the netsnmp configuration files, better HAProxy version support and so on... Malcolm Turnbull

New Open source SNMP MIB and agent for HAProxy:

server scenarios... -- Malcolm Turnbull Loadbalancer.org Ltd. www.loadbalancer.org +44 (0)330 380 1064