Re: prometheus service kills ssl handshake

2019-07-09 Thread Aleksandar Lazic 
Am 08.07.2019 um 12:37 schrieb Aleksandar Lazic:
> Hi Christopher.
> 
> Am 08.07.2019 um 10:30 schrieb Christopher Faulet:
>> Le 06/07/2019 à 23:02, Aleksandar Lazic a écrit :
>>> Hi.
>>>
>>> I use HAP 2.0.1 with haproxy service with my image.
>>> After some times (~several hours) the ssl handshake stops working for the 
>>> https
>>> frontend which offers the prom service.
>>>
> 
> [snipp]
> 
>>
>> Hi Aleks,
>>
>> Could you check with the latest 2.0 snapshot ? An issue about Prometheus was
>> fixed (#151 on GitHub). And some others about connections.
>>
> 
> Okay I created the image with ss-20190706 .
> 
> https://gitlab.com/aleks001/haproxy20-centos/commit/212ed6f4099dd92c72b426726afdf04022065798

After ~20 hours of running Prometheus scraper with ss-20190706 the ssl handshake
errors are gone. From my point of view works the Prometheus exporter now.

Regards
Aleks

Re: prometheus service kills ssl handshake

2019-07-08 Thread Aleksandar Lazic 
Hi Christopher.

Am 08.07.2019 um 10:30 schrieb Christopher Faulet:
> Le 06/07/2019 à 23:02, Aleksandar Lazic a écrit :
>> Hi.
>>
>> I use HAP 2.0.1 with haproxy service with my image.
>> After some times (~several hours) the ssl handshake stops working for the 
>> https
>> frontend which offers the prom service.
>>

[snipp]

> 
> Hi Aleks,
> 
> Could you check with the latest 2.0 snapshot ? An issue about Prometheus was
> fixed (#151 on GitHub). And some others about connections.
> 

Okay I created the image with ss-20190706 .

https://gitlab.com/aleks001/haproxy20-centos/commit/212ed6f4099dd92c72b426726afdf04022065798

Regards
Aleks

Re: prometheus service kills ssl handshake

2019-07-08 Thread Christopher Faulet 

Le 06/07/2019 à 23:02, Aleksandar Lazic a écrit :

Hi.

I use HAP 2.0.1 with haproxy service with my image.
After some times (~several hours) the ssl handshake stops working for the https
frontend which offers the prom service.

The config is mainly the same as showing at the blog post

https://www.me2digital.com/blog/2019/05/haproxy-sni-routing/

I have just added this line.

```
http-request use-service prometheus-exporter if { path /mymetrics }
```

This is the prometheus config snipplet.

```
   - job_name: 'me2d-prom'
 metrics_path: '/mymetrics'
 scheme: 'https'

 static_configs:
 - targets: ['cloud.domain']

```

The lines in the logs does not show too much

```
:::85.10.XXX.XXX:40276 [05/Jul/2019:13:53:33.532] https-in/1: SSL handshake
failure
```

Have someone used this service in the main https config?
Which data (show ...) should I provide to debug this topic?



Hi Aleks,

Could you check with the latest 2.0 snapshot ? An issue about Prometheus was 
fixed (#151 on GitHub). And some others about connections.



--
Christopher Faulet