Re: Please help for a solution like secure_link

2019-07-01 Thread Aleksandar Lazic
Tim, Mon Jul 01 21:36:11 GMT+02:00 2019 Tim Düsterhus : > Aleks, > > Am 01.07.19 um 21:27 schrieb Aleksandar Lazic: > > Maybe it's also possible with spoe ? > > I never worked with SPOE before, but I believe it might be possible. > SPOE is painful and fragile with HAProxy 1.8, though, bec

Re: Please help for a solution like secure_link

2019-07-01 Thread Tim Düsterhus
Aleks, Am 01.07.19 um 21:27 schrieb Aleksandar Lazic: > Maybe it's also possible with spoe ? I never worked with SPOE before, but I believe it might be possible. SPOE is painful and fragile with HAProxy 1.8, though, because you have to spawn the SPOA manually. Also using SPOE is pretty heavy, bec

Re: Please help for a solution like secure_link

2019-07-01 Thread Aleksandar Lazic
Thanks. Maybe it's also possible with spoe ? Lua requires a rebuild of haproxy , which I want to avoid. Mon Jul 01 21:18:42 GMT+02:00 2019 Tim Düsterhus : > Aleks, > > Am 01.07.19 um 21:16 schrieb Aleksandar Lazic: > > > > The concat isn't available in 1.8 any substitution? > > Ugh, yeah. Bot

Re: Please help for a solution like secure_link

2019-07-01 Thread Tim Düsterhus
Aleks, Am 01.07.19 um 21:16 schrieb Aleksandar Lazic: > > The concat isn't available in 1.8 any substitution? Ugh, yeah. Both concat and strcmp are 1.9+. I must've missed that requirement. You can use Lua to add yourself a concat and strcmp converter. Or you do everything in Lua if you need Lua

Re: Please help for a solution like secure_link

2019-07-01 Thread Aleksandar Lazic
The concat isn't available in 1.8 any substitution? Mon Jul 01 17:56:56 GMT+02:00 2019 Aleksandar Lazic : > Hi Tim. > > Am 01.07.2019 um 17:48 schrieb Tim Düsterhus: > > Aleks, > > > > Am 01.07.19 um 16:16 schrieb Aleksandar Lazic: > >> My Idea is to use something like this in haproxy but I'm n

Re: Please help for a solution like secure_link

2019-07-01 Thread Aleksandar Lazic
Hi Tim. Am 01.07.2019 um 17:48 schrieb Tim Düsterhus: > Aleks, > > Am 01.07.19 um 16:16 schrieb Aleksandar Lazic: >> My Idea is to use something like this in haproxy but I'm not sure if haproxy >> only or haproxy+lua is the way to go? > > If you are fine with sha1 then it's theoretically possibl

Re: Please help for a solution like secure_link

2019-07-01 Thread Tim Düsterhus
Aleks, Am 01.07.19 um 16:16 schrieb Aleksandar Lazic: > My Idea is to use something like this in haproxy but I'm not sure if haproxy > only or haproxy+lua is the way to go? If you are fine with sha1 then it's theoretically possible with HAProxy only: > http-request set-var(txn.sha1) url_pa

Please help for a solution like secure_link

2019-07-01 Thread Aleksandar Lazic
Hi. I try to implement with haproxy 1.8 the following solution. https://aws.amazon.com/fr/blogs/networking-and-content-delivery/serving-private-content-using-amazon-cloudfront-aws-lambdaedge/ https://www.nginx.com/blog/securing-urls-secure-link-module-nginx-plus/ https://nginx.org/en/docs/http/n