Re: All "server" settings supported on "default-server" lines

Hi Willy, > Le 29 mars 2017 à 18:29, Willy Tarreau a écrit : > > Hi Manu, > > On Wed, Mar 29, 2017 at 06:10:13PM +0200, Emmanuel Hocdet wrote: >> Hi Willy, >> >>> Le 27 mars 2017 à 17:54, Willy Tarreau a écrit : >>> >>> Hi Manu, >>> >>> On Mon, Mar 27, 2017 at

Re: All "server" settings supported on "default-server" lines

Hi Manu, On Wed, Mar 29, 2017 at 06:10:13PM +0200, Emmanuel Hocdet wrote: > Hi Willy, > > > Le 27 mars 2017 à 17:54, Willy Tarreau a écrit : > > > > Hi Manu, > > > > On Mon, Mar 27, 2017 at 05:46:46PM +0200, Emmanuel Hocdet wrote: > >>> I'm not much comfortable with the "sslv3"

Re: All "server" settings supported on "default-server" lines

Hi Willy, > Le 27 mars 2017 à 17:54, Willy Tarreau a écrit : > > Hi Manu, > > On Mon, Mar 27, 2017 at 05:46:46PM +0200, Emmanuel Hocdet wrote: >>> I'm not much comfortable with the "sslv3" and so on as they easily read >>> as "use sslv3 only" (for me at least) but we can get rid

Re: All "server" settings supported on "default-server" lines

Hi Manu, On Mon, Mar 27, 2017 at 05:46:46PM +0200, Emmanuel Hocdet wrote: > > I'm not much comfortable with the "sslv3" and so on as they easily read > > as "use sslv3 only" (for me at least) but we can get rid of them once we > > have everything needed with min-tls/max-tls, and if some users

Re: All "server" settings supported on "default-server" lines

On Fri, Mar 24, 2017 at 12:20:45PM +0100, Willy Tarreau wrote: > On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: > > Hello HAProxy ML, > > > > I am starting this new thread to publish a serie of patches to make > > all "server" settings be supported on "default-server" lines. >

Re: All "server" settings supported on "default-server" lines

On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: > Hello HAProxy ML, > > I am starting this new thread to publish a serie of patches to make > all "server" settings be supported on "default-server" lines. (...) Fred, that's overall very clean stuff, thank you. I've already

Re: All "server" settings supported on "default-server" lines

> Le 23 mars 2017 à 12:25, Willy Tarreau a écrit : > > On Thu, Mar 23, 2017 at 11:26:50AM +0100, Emmanuel Hocdet wrote: >> Emeric's suggestion is not on the ML. > > I transcripted it in the other e-mail of this same thread. > >> If no- and force- are defined as deprecated it can

Re: All "server" settings supported on "default-server" lines

On Thu, Mar 23, 2017 at 11:26:50AM +0100, Emmanuel Hocdet wrote: > Emeric's suggestion is not on the ML. I transcripted it in the other e-mail of this same thread. > If no- and force- are defined as deprecated it can make a difference. > I'm not used to seeing this kind of proposal for haproxy

Re: All "server" settings supported on "default-server" lines

On 03/23/2017 12:03 PM, Frederic Lecaille wrote: On 03/21/2017 07:54 PM, Frederic Lecaille wrote: [snipped] At this time, as "id" remains as unique setting supported by "server", the patch attached to this mail now produces these error messages: [ALERT] 081/111458 (12190) : parsing

Re: All "server" settings supported on "default-server" lines

On 03/21/2017 07:54 PM, Frederic Lecaille wrote: Hello HAProxy ML, I am starting this new thread to publish a serie of patches to make all "server" settings be supported on "default-server" lines. This is a preliminary work for "server templates" feature. New boolean settings have been added

Re: All "server" settings supported on "default-server" lines

> Le 22 mars 2017 à 22:58, Willy Tarreau a écrit : > > On Wed, Mar 22, 2017 at 05:30:09PM +0100, Emmanuel Hocdet wrote: >> I have patches sent in the ML who change the internal implementation of >> no/force-tlsxx and add min/max-tlsxx (who can replace no/force usage). >> It could

Re: All "server" settings supported on "default-server" lines

On Wed, Mar 22, 2017 at 05:30:09PM +0100, Emmanuel Hocdet wrote: > I have patches sent in the ML who change the internal implementation of > no/force-tlsxx and add min/max-tlsxx (who can replace no/force usage). > It could simplify (or not) what you want to do, but there will be an impact > on

Re: All "server" settings supported on "default-server" lines

On Wed, Mar 22, 2017 at 09:32:01PM +0100, Frederic Lecaille wrote: > > (...) > > > "sslv2" disables "no-sslv3", > > > "ssl-reuse" disables "no-ssl-reuse", > > > "stick" disables "non-stick", > > > "tlsv10" disables "no-tlsv10", > > > "tlsv11" disables "no-tlsv11", > > > "tlsv12" disables

Re: All "server" settings supported on "default-server" lines

On 03/22/2017 05:30 PM, Emmanuel Hocdet wrote: Hi Fred, Hi Emmanuel, Le 21 mars 2017 à 23:14, Willy Tarreau a écrit : On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: Hello HAProxy ML, I am starting this new thread to publish a serie of patches to make all

Re: All "server" settings supported on "default-server" lines

On 03/21/2017 11:14 PM, Willy Tarreau wrote: Hi Fred! Hello Willy, On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: Hello HAProxy ML, I am starting this new thread to publish a serie of patches to make all "server" settings be supported on "default-server" lines. This is

Re: All "server" settings supported on "default-server" lines

Hi Fred, > Le 21 mars 2017 à 23:14, Willy Tarreau a écrit : > On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: >> Hello HAProxy ML, >> >> I am starting this new thread to publish a serie of patches to make >> all "server" settings be supported on "default-server"

Re: All "server" settings supported on "default-server" lines

Hi Fred! On Tue, Mar 21, 2017 at 07:54:30PM +0100, Frederic Lecaille wrote: > Hello HAProxy ML, > > I am starting this new thread to publish a serie of patches to make > all "server" settings be supported on "default-server" lines. > > This is a preliminary work for "server templates" feature.

Re: All "server" settings supported on "default-server" lines

>From b2b7b543da9c46b23c27672ed567d77df254848f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 21 Mar 2017 18:52:12 +0100 Subject: [PATCH 31/31] DOC: server: Add docs for "server" and "default-server" new "no-*" and other

Re: All "server" settings supported on "default-server" lines

>From d749c16ea9a94354998b853233b7558007bff4fc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 21 Mar 2017 11:53:54 +0100 Subject: [PATCH 29/31] MINOR: server: Make 'default-server' support 'disabled' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From d42d42d4d105320248277fb8fba040da02302c24 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 21 Mar 2017 16:39:15 +0100 Subject: [PATCH 30/31] MINOR: server: Add 'no-agent-check' server keyword. X-Bogosity: Ham, tests=bogofilter,

Re: All "server" settings supported on "default-server" lines

>From 57c710d9866bd06837b6aeb7ff5b45e7891b5f0e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 20 Mar 2017 16:30:18 +0100 Subject: [PATCH 28/31] MINOR: server: Make 'default-server' support 'addr' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 78c8279eb296b4a70eecb7eff599e2851749b3c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 20 Mar 2017 14:54:41 +0100 Subject: [PATCH 27/31] MINOR: server: Make 'default-server' support 'sni' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 57d54d2e1f1b200c2c44cbe135c2c74900b83d36 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 17 Mar 2017 15:33:50 +0100 Subject: [PATCH 26/31] MINOR: server: Make 'default-server' support 'source' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From e47f6ab5d8a8fb61888b165adf6f7e12f07c10b1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Thu, 16 Mar 2017 17:17:36 +0100 Subject: [PATCH 25/31] MINOR: server: Make 'default-server' support 'namespace' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 324ec06ee477cce5f9b2ba7b031e87d62c333826 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Wed, 15 Mar 2017 16:20:02 +0100 Subject: [PATCH 23/31] MINOR: server: Make 'default-server' support 'ciphers' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 6ab43989ab00ceef2b681bac8ac919f3fd25311f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Wed, 15 Mar 2017 09:13:33 +0100 Subject: [PATCH 22/31] MINOR: server: Make 'default-server' support 'cookie' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 93f6899637050a8c00549d8b127c19d5e7aad81a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Wed, 15 Mar 2017 16:36:09 +0100 Subject: [PATCH 24/31] MINOR: server: Make 'default-server' support 'tcp-ut' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 0f1fc0c3325bd15d97fc9005a72b2094c170c609 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Wed, 15 Mar 2017 08:55:39 +0100 Subject: [PATCH 21/31] MINOR: server: Make 'default-server' support 'observe' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 617a66ec167fd7b780028a7a58b44546dba3e810 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 14 Mar 2017 16:42:49 +0100 Subject: [PATCH 20/31] MINOR: server: Make 'default-server' support 'redir' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 9da661d95b42cac3c65be783b4c8c71e900366e6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 14 Mar 2017 15:52:04 +0100 Subject: [PATCH 19/31] MINOR: server: Make 'default-server' support 'ca-file', 'crl-file' and 'crt'

Re: All "server" settings supported on "default-server" lines

>From 6b94e45e66da74f50c42b11cd3c087f0be991513 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 14 Mar 2017 15:21:31 +0100 Subject: [PATCH 18/31] MINOR: server: Make 'default-server' support 'track' setting. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 72440786d18c7e6141bf655287ce3d0c90aafc08 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 14 Mar 2017 14:32:17 +0100 Subject: [PATCH 17/31] BUG/MINOR: cfgparse: loop in tracked servers lists not detected by

Re: All "server" settings supported on "default-server" lines

>From 174406c72eae257d07e2239a9aea6284a644017a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Tue, 14 Mar 2017 11:20:13 +0100 Subject: [PATCH 16/31] MINOR: server: Make 'default-server' support 'check' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From ffaf903ad7d5c7b9920e1e32ddc4f510365e8e5c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 15:52:01 +0100 Subject: [PATCH 15/31] MINOR: server: Make 'default-server' support 'verifyhost' setting. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 984c811ffcf50df6e400ff7e4f774d96e401924a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 13:10:59 +0100 Subject: [PATCH 13/31] CLEANUP: server: code alignement. X-Bogosity: Ham, tests=bogofilter,

Re: All "server" settings supported on "default-server" lines

>From 39d6ba95c1c1cf2b33d916c15c40f8d6f223e60b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 13:41:16 +0100 Subject: [PATCH 14/31] MINOR: server: Make 'default-server' support 'verify' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 70b9d6c0246b1c3e28ded68f1617497aed1dd2d0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 12:08:01 +0100 Subject: [PATCH 12/31] MINOR: server: Make 'default-server' support 'send-proxy-v2-ssl*' keywords.

Re: All "server" settings supported on "default-server" lines

>From e6118524a2aaee921971a6be9020b75775507b52 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 11:54:17 +0100 Subject: [PATCH 11/31] MINOR: server: Make 'default-server' support 'ssl' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From 1e0bb327696daf9f2b39beff1f981767fd047cc0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 11:32:20 +0100 Subject: [PATCH 10/31] MINOR: server: Make 'default-server' support 'no-ssl*' and 'no-tlsv*' keywo rds.

Re: All "server" settings supported on "default-server" lines

>From bed0db831d2cd504f3d66df21fd53c92dc4be52a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 11:02:01 +0100 Subject: [PATCH 09/31] CLEANUP: server: code alignement. X-Bogosity: Ham, tests=bogofilter,

Re: All "server" settings supported on "default-server" lines

>From 94220ddfed21228e15f09dd73a5357f0245c13ed Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 10:54:52 +0100 Subject: [PATCH 08/31] MINOR: server: Make 'default-server' support 'force-sslv3' and 'force-tlsv1[0-2]'

Re: All "server" settings supported on "default-server" lines

>From 17f461d5878f902e34a113d462218a661c747d4c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 13 Mar 2017 10:38:04 +0100 Subject: [PATCH 07/31] MINOR: server: Make 'default-server' support 'check-ssl' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From bd77e21eab9aa777962ae94ce7dbff2224b1b295 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 10 Mar 2017 16:40:00 +0100 Subject: [PATCH 06/31] MINOR: server: Make 'default-server' support 'send-proxy' and 'send-proxy-v2

Re: All "server" settings supported on "default-server" lines

>From 83766d4697f3af4626506a6af8b186028b565fe8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 10 Mar 2017 15:50:49 +0100 Subject: [PATCH 05/31] MINOR: server: Make 'default-server' support 'non-stick' keyword. X-Bogosity: Ham,

Re: All "server" settings supported on "default-server" lines

>From c39ce3eba31d37c2e790426c8127d131d6ec9072 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 10 Mar 2017 15:36:14 +0100 Subject: [PATCH 04/31] CLEANUP: server: code alignement. X-Bogosity: Ham, tests=bogofilter,

Re: All "server" settings supported on "default-server" lines

>From a7f6425b24e7855259b6b858e8a322fde0d2bd39 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 10 Mar 2017 14:04:31 +0100 Subject: [PATCH 03/31] MINOR: server: Make 'default-server' support 'check-send-proxy' keyword. X-Bogosity:

Re: All "server" settings supported on "default-server" lines

>From ff5d557c972a9953073773103e4fccad9bc32638 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Fri, 10 Mar 2017 11:51:05 +0100 Subject: [PATCH 02/31] MINOR: server: Make 'default-server' support 'backup' keyword. X-Bogosity: Ham,