problem about haproxy-Collection of common programming errors
th3morg
proxy load-balancing c3p0 haproxy
In order to increase performance of my Java/Spring web app deployed in Tomcat 7, I am trying to use MySQL read replicas for queries that I’ve annotated as read-only okay. I have been using c3p0 for connection pooling prior to setting up an haxproxy server that will load balance requests to the read replicas and it works fine. I know that these two things kind of work against each other because each are trying to pool connections, however if I don’t use connection pooling at the application layer
Zach L
java ssl haproxy sslsocketfactory
I get connection failures that appear randomly when connecting to an HAProxy server using SSL. I have confirmed that these failures happen on JDK versions 1.7.0_21 and 1.7.0_25 but not with 1.7.0_04 or with 1.6.0_38.The exception is Exception in thread “main” javax.net.ssl.SSLPeerUnverifiedException: peer not authenticatedat sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:397)at SSLTest2.main(SSLTest2.java:52)at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)a
Jonas
http webserver keep-alive haproxy
So according to the haproxy author, who knows a thing or two about http: Keep-alive was invented to reduce CPUusage on servers when CPUs were 100times slower. But what is not said isthat persistent connections consume alot of memory while not being usableby anybody except the client whoopenned them. Today in 2009, CPUs arevery cheap and memory is still limitedto a few gigabytes by the architectureor the price. If a site needskeep-alive, there is a real problem.Highly loaded sites often disableke
Anand Soni
java load-balancing rabbitmq haproxy round-robin
I want to use HAProxy as a load balancer. I want to put two rabbitmq server behind haproxy. Both the rabbitmq server are on different instance of EC2. I have configure HAProxy server by following this reference. I works but the problem is messages are not published in roundrobin pattern. Messages are publish only on one server. Is there any different configuration for my requirement?My configureation in /etc/haproxy/haproxy.cfglisten rabbitmq 0.0.0.0:5672mode tcpstats enablebalance roundrob
Abimaran Kugathasan
git ssl haproxy
My computer is connected to a proxy-server. This server has its own ssl-certificate, which I have to use. Firefox, curl and wget are working fine with https-connections. But when I do: git clone https://github.com/puppetlabs/pupetdb.gitI got error message:”GnuTLS recv error(-): A TLS packet with unexpected length wasreceived”I don’t know how to fix it and need advice. Thanks
coneybeare
apache-2.2 logging log-files haproxy
I am trying to clean out some of the log clutter from my machines and am starting by removing requests that are generated from the server themselves. I have cache warmers running around the clock and I don’t want these polluting the logs.I was able to get apache to stop logging local requests by adding a dontlog for the local IP:SetEnvIf Remote_Addr “RE\.DA\.CT\.ED” dontlog CustomLog “|logger -p local3.info -t http” combined env=!dontlogand now I am looking for something similar to put in a conf
Chris
haproxy
I am having some issues with HAProxy configuration. I have been playing around with it to try and make it more resilient to high server loads and Denial of Service. However, I felt it was working fine until suddenly I was victim of a (D)DoS attack – Haproxy was reporting the backend as down even though I could still access it fine via the direct port.Could somebody please check my HAProxy config and see if there is somewhere I am messing up or why I would be experiencing this.. I just can’t seem
Anand Soni
amazon-ec2 load-balancing haproxy rabbitmq
I wanted to use HAProxy for my web app for load balancing purpose. I am trying to add a new rabbitmq node dynamically in HAProxy server using command : haproxy -p /var/run/haproxy.pid -sf $(cat /var/run/haproxy.pid). I am doing tcp connection mode with leastconn balance algorithm in load balancing. What is expected is when there is 3 connection in one rabbitmq, I add a new rabbit server in HAProxy server. so the next connection would pass to 2nd rabbitmq server which is not happening in my case.
Anony-Mousse
load-balancing haproxy
We are using HAPROXY to cluster two app servers. Currently, for test purpose, the 2 servers are virtual servers.We are observing lot of Concurrency warnings being logged in the server logs as below[CacheListener] Possible concurrency problem: Replicated version id 273 is less than or equal to in-memory version for session tDC2DAPeZ8ChQ74l1cHgig__What I found, when I did a search in google, is that many such instances could lead to load balancer crashing.I think the issue logged here : https://
guojinpeng
connection statistics reset haproxy was
I’m using haproxy for load balance, it works very happily.I setup a statistics page, this page return “the connection was reset” while I refresh it sometimes.listen status 0.0.0.0:8080stats enablestats refresh 5sstats uri /admin Is this a bug or there’s some configurition problem?thanks!
user1075894
haproxy stunnel pound
I’m looking at introducing a loadbalancer to my existing site infrastructure to help with traffic growth and provide a level of failure protection.The site I am running uses SSL certificates for the login section and I will need to continue with this functionality. The backend servers will need to be aware of the originating IP address so I can’t use the TCP loadbalancing function and will need the SSL terminated on the loadbalancer so I can insert aX-Forwarded-ForHeader. I have seen a couple of
Andrew Smith
iptables haproxy ddos linux-kernel rate-limiting
Please do not reply with “this is not possible”, as it’s waste of time. I am developing cloud appliance and I have a valid reason to protect this layer against DDoS, and there are few companies doing the same, so please dont tell me that I dont have the point, as many companies looking to buy this solution and I dont see the problem with implementing it using stock LinuxMy Linux kernel is crashing with oops on 10.000 connections due to lack of resources like CPU and RAM. I was wondering how to l
Daniel Hough
ssl haproxy
I’m having an issue where HAProxy is crashing with no explanation when I switch from 1.4.12 to 1.5-dev12. The reason I’m switching is for the SSL offloading.My config file doesn’t have any errors, it’s quite simple and it works well with 1.4 – but for some reason when I run it with 1.5-dev12 I see the logs noting that the two backends I have have been set up, and then when I hit one of the frontends, I get an HTTP 400 in the browser and suddenly HAProxy isn’t running anymore when I check.I under
growse
haproxy rabbitmq graphite
I’m trying to pull some metrics into Graphite over a RabbitMQ exchange. I’ve got my publishers merrily publishing data to an exchange called metrics, and I’ve configured carbon.conf with the following:ENABLE_AMQP = True AMQP_HOST = hostname AMQP_PORT = 5672 AMQP_VHOST = /vhost AMQP_USER = user AMQP_PASSWORD = password AMQP_EXCHANGE = metrics AMQP_METRIC_NAME_IN_BODY = TrueThe rMQ installation is a two-node cluster behind haproxy.When this works, it works great. However, quite often, carbon throw
Andrew B
php ssl reverse-proxy haproxy joomla
Having a strange problem with Haproxy. I’m using it to frontend SSL connections to a few Joomla sites and the sites don’t appear to be picking up on the https front end which is leading to javascript errors.The relevant sections in my haproxy config:frontend http-inbind *:80 acl is_abc hdr_end(host) -i abc.comuse_backend abc if is_abcfrontend https-in bind :443 ssl crt certificate.pem crt /var/certs/servers reqadd Front-End-Https:\ On reqadd X-Forwarded-Proto:\ https acl is_abc hdr_end(host) -i
beardtwizzle
load-balancing haproxy
I have haproxy running as my load-balancer and from the stats web interface that comes with haproxy, I can put a web server into maintenance mode (and bring it back out again) – which is great!However, I also want to be able to perform that same action from the command line (for use in some automated deployment workflows). Is this possible, and if so how?Many thanks
thiesdiggity
ubuntu mysql haproxy high-availability
I am trying to setup HAProxy with MySQL failover with Ubuntu. I used a setup similar to this serverfault question, however I am getting the following error when starting haproxy:[ALERT] 341/220001 (17405) : parsing [/etc/haproxy/haproxy.cfg:29] : unknown option ‘mysql-check’. [ALERT] 341/220001 (17405) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg [ALERT] 341/220001 (17405) : Fatal errors found in configuration.I even tried installing the lastest version of HAProxy (1.4.22).
quanta
haproxy
I am using HA Proxy HA-Proxy version 1.4.18 2011/09/16 I am trying to insert the following into /etc/init.d/haproxy.cfg file# Use General Purpose Couter (gpc) 0 in SC1 as a global abuse counter # Monitors the number of request sent by an IP over a period of 10 secondsstick-table type ip size 1m expire 10s store gpc0,http_req_rate(10s)tcp-request connection track-sc1 srctcp-request connection reject if { src_get_gpc0 gt 0 }# Table definition stick-table type ip size 100k expire 30s store conn_cu
Adrian
mysql load-balancing haproxy connection
I’ve set up load balancing MySQL slaves using HAProxy via a xinetd. 2 load balancers shared a virtual IP that is managed by Pacemaker:crm configure show:node SVR120-27148.localdomain node SVR255-53192.localdomain primitive failover-ip ocf:heartbeat:IPaddr2 \params ip=”192.168.5.9″ cidr_netmask=”32″ \op monitor interval=”5s” \meta is-managed=”true” primitive haproxy ocf:heartbeat:haproxy \params conffile=”/etc/haproxy/haproxy.cfg” \op monitor interval=”30s” \meta is-managed=”true” colocation hapr
user128296
postfix load-balancing haproxy
I want to configure Haproxy for outgoing mails load balancing on my centos 5.6 vps server. for this i have installed postfix on load balancer. My postfix sasl configuration as follows to use Haproxy and sasl authentication.smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination data_directory = /var/lib/postfix inet_protocols = ipv4 smtp_sasl_
OuterEdge
ssl https haproxy openssl
I’ve got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully.I’m now trying to get SSL traffic to work (in TCP mode and on just one server for now) however I keep getting the following error when testing via openssl:26396:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:588:However, when I try the same test (openssl s_client -connect) on the web servers IP address and hostname, everything seems to look O
ghickman
tomcat haproxy
HAProxy is pinging tomcat and requesting a very small page causing Tomcat to create a new session every 2 seconds. Is there is a way to programmatically (or through a config) tell Tomcat to not create a new session for a specific page?
Web site is in building
I discovery a place to host code、demo、 blog and websites.
Site access is fast but not money
