Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-27 Thread Emmanuel Hocdet
> Le 27 sept. 2019 à 12:23, Geoff Simmons a écrit : > > On 9/26/19 19:27, Emmanuel Hocdet wrote: > >>> And I wonder if there are situations in which someone will want to >>> specifically choose one source of truth for authority over the other. >>> Suppose an incoming connection uses TLS with

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-27 Thread Geoff Simmons
On 9/26/19 19:27, Emmanuel Hocdet wrote: > >>> >>> Proposal reworking after playing with « authority » and look at how « src >>> »/« dst » are working. >>> >>> Authority » can come from transport layer (TLS), ProxyV2 TLV or « >>> set-authority ». >>> « src/dst » is set from transport layer

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Emmanuel Hocdet
> Le 26 sept. 2019 à 18:10, Geoff Simmons a écrit : > > On 9/26/19 11:43, Emmanuel Hocdet wrote: >> >> Proposal reworking after playing with « authority » and look at how « src >> »/« dst » are working. >> >> Authority » can come from transport layer (TLS), ProxyV2 TLV or « >>

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Tim Düsterhus
Geoff, Am 26.09.19 um 18:10 schrieb Geoff Simmons: > Incidentally, I too have not seen a patch on this thread since September > 10th (not sure if you meant to send a new one today). > see my sibling emails to this thread: https://www.mail-archive.com/haproxy@formilux.org/msg35005.html Best

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Geoff Simmons
On 9/26/19 11:43, Emmanuel Hocdet wrote: > > Proposal reworking after playing with « authority » and look at how « src »/« > dst » are working. > > Authority » can come from transport layer (TLS), ProxyV2 TLV or « > set-authority ». > « src/dst » is set from transport layer (TCP), overwrite by

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Tim Düsterhus
Manu, Am 26.09.19 um 17:40 schrieb Emmanuel Hocdet: > I see it on my side. > Ah, again it's the stupid Apple Mail issue at fault. It misconstructs emails with attachments and the attachment is only visible when viewing the HTML version. I can confirm the patch is there when showing HTML

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Emmanuel Hocdet
Hi Tim, > Le 26 sept. 2019 à 15:11, Tim Düsterhus a écrit : > > Manu, > > Am 26.09.19 um 11:43 schrieb Emmanuel Hocdet: >> Included my patch for that proposal. (could be split with comments from this >> mail) > > Did you forgot to actually attach the patch? I'm not seeing anything. > I

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Tim Düsterhus
Manu, Am 26.09.19 um 11:43 schrieb Emmanuel Hocdet: > Included my patch for that proposal. (could be split with comments from this > mail) Did you forgot to actually attach the patch? I'm not seeing anything. Best regards Tim Düsterhus

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-26 Thread Emmanuel Hocdet
Hi,Proposal reworking after playing with « authority » and look at how « src »/« dst » are working.Authority » can come from transport layer (TLS), ProxyV2 TLV or « set-authority ».« src/dst » is set from transport layer (TCP), overwrite by Proxy-protocol and « set-{src,dst} »I propose to do the

Re: [PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-12 Thread Emmanuel Hocdet
patch update with bug fix > Le 10 sept. 2019 à 14:19, Emmanuel Hocdet a écrit : > > > Hi, > > Included, my first proposal for « set-authority » action, to set > custom "authority" sample fetch. > > Use case could be to use « sni authority » in server line. > For "proxy-v2-options

[PATCH] MINOR: connection: add "set-authority" and "authority" sample fetch

2019-09-10 Thread Emmanuel Hocdet
Hi, Included, my first proposal for « set-authority » action, to set custom "authority" sample fetch. Use case could be to use « sni authority » in server line. For "proxy-v2-options authority », authority is pick from custom authority (« set-authority »), ppv2 authority or ssl_fc_sni. Sample