Re: Unable to modify haproxy stats url header

2017-10-16 Thread Willy Tarreau
On Mon, Oct 16, 2017 at 07:42:11AM +, Suraj Bora -X (surbora - HCL AMERICA INC at Cisco) wrote: > Hi Willy and Lukas, > > Could you please confirm, if we are planning to fix this in near feature. > If yes, please let us know Sure it will be worked on but it's very low priority considering

RE: Unable to modify haproxy stats url header

2017-10-16 Thread Suraj Bora -X (surbora - HCL AMERICA INC at Cisco)
t;w...@1wt.eu>; Lukas Tribus <lu...@gmx.net> Cc: haproxy@formilux.org Subject: RE: Unable to modify haproxy stats url header Hi Lukas, Willy, Thanks for confimation. We are running some security scan on haproxy urls and found that Ha-proxy status URL has following vernability: 1. Cacheable SS

RE: Unable to modify haproxy stats url header

2017-10-12 Thread Suraj Bora -X (surbora - HCL AMERICA INC at Cisco)
CA INC at Cisco) <surb...@cisco.com>; haproxy@formilux.org Subject: Re: Unable to modify haproxy stats url header Hi Lukas, On Wed, Oct 11, 2017 at 06:23:23PM +0200, Lukas Tribus wrote: > Hello Suraj, hello Willy, > > > > frontend stats_proxy > >     bind :ssl crt

Re: Unable to modify haproxy stats url header

2017-10-11 Thread Willy Tarreau
Hi Lukas, On Wed, Oct 11, 2017 at 06:23:23PM +0200, Lukas Tribus wrote: > Hello Suraj, hello Willy, > > > > frontend stats_proxy > >     bind :ssl crt no-sslv3 no-tlsv10 > > ciphers > >     mode http > >     default_backend stats_server > >     rspadd Cache-Control:\

Re: Unable to modify haproxy stats url header

2017-10-11 Thread Lukas Tribus
Hello Suraj, hello Willy, > frontend stats_proxy >     bind :ssl crt no-sslv3 no-tlsv10 > ciphers >     mode http >     default_backend stats_server >     rspadd Cache-Control:\ no-store,no-cache,private >     rspadd Pragma:\ no-cache >     rspadd Strict-Transport-Security: > > backend

RE: Unable to modify haproxy stats url header

2017-10-10 Thread Suraj Bora -X (surbora - HCL AMERICA INC at Cisco)
Sent: 09 October 2017 23:08 To: Suraj Bora -X (surbora - HCL AMERICA INC at Cisco) <surb...@cisco.com>; haproxy@formilux.org Subject: Re: Unable to modify haproxy stats url header Hello, Am 09.10.2017 um 15:28 schrieb Suraj Bora -X (surbora - HCL AMERICA INC at Cisco): > >   &g

Re: Unable to modify haproxy stats url header

2017-10-09 Thread Lukas Tribus
Hello, Am 09.10.2017 um 15:28 schrieb Suraj Bora -X (surbora - HCL AMERICA INC at Cisco): > >   > > *We are recently migrated to haproxy 1.5.4 from haproxy-1.5-dev23.3 release, > not seen this issue on same.* > I'm sorry, but 1.5.4 is 3 years old already and contains 183 already fixed bugs: