<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments for Loadbalancer.org Blog</title>
	<atom:link href="http://blog.loadbalancer.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.loadbalancer.org</link>
	<description>When a single point of failure is not an option</description>
	<pubDate>Sun, 21 Mar 2010 03:38:00 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Daniel</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-941</link>
		<dc:creator>Daniel</dc:creator>
		<pubDate>Thu, 18 Mar 2010 23:57:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-941</guid>
		<description>Hello Malcolm,
I try to implement haproxy in transparent mode like in your how-to.
I add rules in iptables, but when I try to access to the service, the result is "503 Service Unavailable".
Without the line "source 0.0.0.0 usesrc clientip" all works correctly, obviously without transparency.
Have you got any ideas? Where I'm wrong?
Thanks! Daniel</description>
		<content:encoded><![CDATA[<p>Hello Malcolm,<br />
I try to implement haproxy in transparent mode like in your how-to.<br />
I add rules in iptables, but when I try to access to the service, the result is &#8220;503 Service Unavailable&#8221;.<br />
Without the line &#8220;source 0.0.0.0 usesrc clientip&#8221; all works correctly, obviously without transparency.<br />
Have you got any ideas? Where I&#8217;m wrong?<br />
Thanks! Daniel</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Bob Smith</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-912</link>
		<dc:creator>Bob Smith</dc:creator>
		<pubDate>Tue, 02 Mar 2010 23:22:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-912</guid>
		<description>Here is my question.  I have a simple setup with HAProxy and 2 backend servers.  Works like a charm except that on these backend servers I look at the HTTP_HOST with RewriteCond to do various things.  When I turn logging on it looks like the "Host" that I am getting is either the IP address or nothing.  I have looked at the documentation, but any idea how I can get the backend server to "see" what the URL is?</description>
		<content:encoded><![CDATA[<p>Here is my question.  I have a simple setup with HAProxy and 2 backend servers.  Works like a charm except that on these backend servers I look at the HTTP_HOST with RewriteCond to do various things.  When I turn logging on it looks like the &#8220;Host&#8221; that I am getting is either the IP address or nothing.  I have looked at the documentation, but any idea how I can get the backend server to &#8220;see&#8221; what the URL is?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Anand Phulwani</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-900</link>
		<dc:creator>Anand Phulwani</dc:creator>
		<pubDate>Mon, 01 Feb 2010 07:38:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-900</guid>
		<description>Dear Malcolm,

After Reading The Documentation I Had An Hint That This Is An Inbound Proxy And Works For Basically For Web Server Managed In A Kind Of Cluster.
So Actually This Is Just Different For What I Am Trying To Do With Squid.

Thanks,
Anand</description>
		<content:encoded><![CDATA[<p>Dear Malcolm,</p>
<p>After Reading The Documentation I Had An Hint That This Is An Inbound Proxy And Works For Basically For Web Server Managed In A Kind Of Cluster.<br />
So Actually This Is Just Different For What I Am Trying To Do With Squid.</p>
<p>Thanks,<br />
Anand</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-899</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Sun, 31 Jan 2010 19:46:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-899</guid>
		<description>Anand,

1) I guess squid is an outbound proxy (standard) and HAProxy is an inbound proxy (reverse), like Pound.
2) Why would you be running Google talk servers? (this is a reverse proxy not outbound)
3) Yes, but I'm not sure exactly what you are after...
4) Not directly, but you just terminate the HTTPS with stunnel or Pound first...so yes.</description>
		<content:encoded><![CDATA[<p>Anand,</p>
<p>1) I guess squid is an outbound proxy (standard) and HAProxy is an inbound proxy (reverse), like Pound.<br />
2) Why would you be running Google talk servers? (this is a reverse proxy not outbound)<br />
3) Yes, but I&#8217;m not sure exactly what you are after&#8230;<br />
4) Not directly, but you just terminate the HTTPS with stunnel or Pound first&#8230;so yes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Anand Phulwani</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-898</link>
		<dc:creator>Anand Phulwani</dc:creator>
		<pubDate>Sun, 31 Jan 2010 13:10:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-898</guid>
		<description>Dear Malcolm,

I know its very stupid to ask such newbie questions but that is all what i have right now.

1) How is Haproxy different from squid.
2) Transparent squid does not works with gtalk, is that a problem with Haproxy too, if it runs with tproxy.
3) Does Haproxy support acl (based on time,based on url regex).
4) Can we also use acl on HTTPS or in other words how does Haproxy handles HTTPS.

Your reply would indeed be a lot of help to me.
Expecting your positive reply.
Thanks,
Anand Phulwani</description>
		<content:encoded><![CDATA[<p>Dear Malcolm,</p>
<p>I know its very stupid to ask such newbie questions but that is all what i have right now.</p>
<p>1) How is Haproxy different from squid.<br />
2) Transparent squid does not works with gtalk, is that a problem with Haproxy too, if it runs with tproxy.<br />
3) Does Haproxy support acl (based on time,based on url regex).<br />
4) Can we also use acl on HTTPS or in other words how does Haproxy handles HTTPS.</p>
<p>Your reply would indeed be a lot of help to me.<br />
Expecting your positive reply.<br />
Thanks,<br />
Anand Phulwani</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Load balancing Windows Terminal Server – HAProxy and RDP Cookies by Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/load-balancing-windows-terminal-server-%e2%80%93-haproxy-and-rdp-cookies/comment-page-1/#comment-894</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Sun, 17 Jan 2010 18:42:36 +0000</pubDate>
		<guid isPermaLink="false">http://blog.loadbalancer.org/?p=296#comment-894</guid>
		<description>Terry,
Yes long time no talk.. I've just got back from a cruise round New Zealand with the family (It was fantastic).

At the moment XEN proprietary or open source has very little traction with paying customers. But yes long term we are planning a whole host of virtualized load balancers like our current VMWare appliance (similar idea to Netscalers) i.e. an exact copy of our hardware OS/Software Stack runing on XEN/Microsoft etc. We have an Amazon EC2 platform close to release which relies heavily on HAProxy (as a lot of the layer 4 technology won't work in the Amazon cloud). We also have several projects with ISPs integrating our load balancer to their various control panels.

Long term I think it would be great for the market if Google and Amazon came together to offer an &lt;a href="http://www.ubuntu.com/cloud" rel="nofollow"&gt;open source cloud standard&lt;/a&gt; that would provide a platform with enough users to make commercial development of products a worthwhile effort; production cost wise (we've only had 3 serious XEN enquires but loads of VMWare sales...).

Our EC2 cloud development has taken over almost a year and that starts getting expensive! Maybe we should look at outsourcing all of our development to India?</description>
		<content:encoded><![CDATA[<p>Terry,<br />
Yes long time no talk.. I&#8217;ve just got back from a cruise round New Zealand with the family (It was fantastic).</p>
<p>At the moment XEN proprietary or open source has very little traction with paying customers. But yes long term we are planning a whole host of virtualized load balancers like our current VMWare appliance (similar idea to Netscalers) i.e. an exact copy of our hardware OS/Software Stack runing on XEN/Microsoft etc. We have an Amazon EC2 platform close to release which relies heavily on HAProxy (as a lot of the layer 4 technology won&#8217;t work in the Amazon cloud). We also have several projects with ISPs integrating our load balancer to their various control panels.</p>
<p>Long term I think it would be great for the market if Google and Amazon came together to offer an <a href="http://www.ubuntu.com/cloud" rel="nofollow">open source cloud standard</a> that would provide a platform with enough users to make commercial development of products a worthwhile effort; production cost wise (we&#8217;ve only had 3 serious XEN enquires but loads of VMWare sales&#8230;).</p>
<p>Our EC2 cloud development has taken over almost a year and that starts getting expensive! Maybe we should look at outsourcing all of our development to India?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Load balancing Windows Terminal Server – HAProxy and RDP Cookies by Terry Vercoe</title>
		<link>http://blog.loadbalancer.org/load-balancing-windows-terminal-server-%e2%80%93-haproxy-and-rdp-cookies/comment-page-1/#comment-893</link>
		<dc:creator>Terry Vercoe</dc:creator>
		<pubDate>Sun, 17 Jan 2010 03:42:56 +0000</pubDate>
		<guid isPermaLink="false">http://blog.loadbalancer.org/?p=296#comment-893</guid>
		<description>Hi Malcom

It is Terry from New Zealand, (It’s been a few years since we last talked).

I think it might be of interest to evaluate using this type of perpetual trial model (1Mb) and then pay as you grow for your excellent VSA product. 

It would gain traction with certain cloud providers.

http://jariangibson.com/2009/09/18/netscaler-vpx-express-is-a-must-for-all-xenserver-environments/

http://jariangibson.com/2009/12/01/choosing-a-netscaler-hardware-appliance-or-virtual-appliance/

Regards

Terry Vercoe</description>
		<content:encoded><![CDATA[<p>Hi Malcom</p>
<p>It is Terry from New Zealand, (It’s been a few years since we last talked).</p>
<p>I think it might be of interest to evaluate using this type of perpetual trial model (1Mb) and then pay as you grow for your excellent VSA product. </p>
<p>It would gain traction with certain cloud providers.</p>
<p><a href="http://jariangibson.com/2009/09/18/netscaler-vpx-express-is-a-must-for-all-xenserver-environments/" rel="nofollow">http://jariangibson.com/2009/09/18/netscaler-vpx-express-is-a-must-for-all-xenserver-environments/</a></p>
<p><a href="http://jariangibson.com/2009/12/01/choosing-a-netscaler-hardware-appliance-or-virtual-appliance/" rel="nofollow">http://jariangibson.com/2009/12/01/choosing-a-netscaler-hardware-appliance-or-virtual-appliance/</a></p>
<p>Regards</p>
<p>Terry Vercoe</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Configure HAProxy with TPROXY kernel for full transparent proxy by Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy/comment-page-1/#comment-889</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Tue, 05 Jan 2010 13:09:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=106#comment-889</guid>
		<description>Hanlin,

Er... no idea.. It probably won't work with Apache on the same host as HAProxy... But If Apache is on the same host why do you need HAProxy anyway?</description>
		<content:encoded><![CDATA[<p>Hanlin,</p>
<p>Er&#8230; no idea.. It probably won&#8217;t work with Apache on the same host as HAProxy&#8230; But If Apache is on the same host why do you need HAProxy anyway?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Load Balancing via Direct Routing has several key advantages over NAT based methods by Malcolm Turnbull</title>
		<link>http://blog.loadbalancer.org/load-balancing-via-direct-routing-has-several-key-advantages-over-nat-based-methods/comment-page-1/#comment-888</link>
		<dc:creator>Malcolm Turnbull</dc:creator>
		<pubDate>Tue, 05 Jan 2010 12:41:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.loadbalancer.org/blog/?p=10#comment-888</guid>
		<description>Mark,

Ah I meant no local SSL termination/acceleration with DSR (on the load balancer), external SSL accelerators should be fine as long as you can configure them for the ARP problem. BTW which brand of accelerators do you use? Any good?</description>
		<content:encoded><![CDATA[<p>Mark,</p>
<p>Ah I meant no local SSL termination/acceleration with DSR (on the load balancer), external SSL accelerators should be fine as long as you can configure them for the ARP problem. BTW which brand of accelerators do you use? Any good?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Google killed the IT Trade show&#8230;. by Jon</title>
		<link>http://blog.loadbalancer.org/google-killed-the-it-trade-show/comment-page-1/#comment-887</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Tue, 05 Jan 2010 12:36:17 +0000</pubDate>
		<guid isPermaLink="false">http://blog.loadbalancer.org/?p=281#comment-887</guid>
		<description>Malcolm,

I know it might be quite small potatoes in the scheme of things, but
last year I met you and was introduced to your products at Infosec.

Since then I convinced the network guys at our colo host, Qube networks
to buy and support Loadbalancer.org's for us, and I know that since then
they have made further purchases for themselves and other customers.
Further to this I have put at least five prospects your way, and I'm
about to buy another pair for a personal customer of mine.

So you don't get *nothing* out of it :)

Hope all is well,
Jon Robinson
&lt;a href="http://www.blinkbox.com/" rel="nofollow"&gt;Blinkbox Entertainment Ltd - The best movies &amp; TV online&lt;/a&gt;
Jon Robinson &#124; Head of IT Operations</description>
		<content:encoded><![CDATA[<p>Malcolm,</p>
<p>I know it might be quite small potatoes in the scheme of things, but<br />
last year I met you and was introduced to your products at Infosec.</p>
<p>Since then I convinced the network guys at our colo host, Qube networks<br />
to buy and support Loadbalancer.org&#8217;s for us, and I know that since then<br />
they have made further purchases for themselves and other customers.<br />
Further to this I have put at least five prospects your way, and I&#8217;m<br />
about to buy another pair for a personal customer of mine.</p>
<p>So you don&#8217;t get *nothing* out of it <img src='http://blog.loadbalancer.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Hope all is well,<br />
Jon Robinson<br />
<a href="http://www.blinkbox.com/" rel="nofollow">Blinkbox Entertainment Ltd - The best movies &amp; TV online</a><br />
Jon Robinson | Head of IT Operations</p>
]]></content:encoded>
	</item>
</channel>
</rss>
