Just thought I’d let you know that the links to the kernel headers no longer seem to work. I had a browse around the download area and can’t see them anyway. Unfortunately we’re a bit tied on v6.8.

Thanks

Not a problem, here is the output:

Available polling systems :
sepoll : pref=400, test result OK
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 4 (4 usable), will use sepoll.
Using sepoll() as the polling mechanism.

~Gilbert

~Scott

Here is what I have:

HA-Proxy version 1.4-dev7 2010/01/25
Copyright 2000-2009 Willy Tarreau

Build options :
TARGET = linux26
CPU = generic
CC = gcc
CFLAGS = -O2 -g
OPTIONS = USE_LINUX_TPROXY=1 USE_STATIC_PCRE=1

Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Available polling systems :
sepoll : pref=400, test result OK
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 4 (4 usable), will use sepoll.

HAproxy debug output:

00000000:http1.accept(0004)=0007 from [x.x.x.x:53773]
00000000:http1.clireq[0007:ffff]: GET / HTTP/1.1
00000000:http1.clihdr[0007:ffff]: Host: 10.10.10.1
00000000:http1.clihdr[0007:ffff]: Connection: keep-alive
00000000:http1.clihdr[0007:ffff]: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
00000000:http1.clihdr[0007:ffff]: User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31
00000000:http1.clihdr[0007:ffff]: DNT: 1
00000000:http1.clihdr[0007:ffff]: Accept-Encoding: gzip,deflate,sdch
00000000:http1.clihdr[0007:ffff]: Accept-Language: en-US,en;q=0.8
00000000:http1.clihdr[0007:ffff]: Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
00000000:http1.clicls[0007:0008]

~Gilbert

Thanks very much for your feedback. The old style current connection counts by RIP/VIP are still available under Reports > Layer 4 Status and we will listen very carefully to our customer reaction to the change from numbers to graphs. We definitely have sort and drill down options on the system overview as top priorities on the development list. Would sort by name suffice for your situation? Would you like any other functionality like group by service type, method, port, health status or pool? Custom index position for each VIP/RIP? I’ll get the dev team to have a brain storm on this….

If its something like this:
# haproxy -vv
HA-Proxy version 1.5-dev17 2012/12/28
Copyright 2000-2012 Willy Tarreau

Build options :
TARGET = linux26
CPU = generic
CC = gcc
CFLAGS = -O2 -g -fno-strict-aliasing
OPTIONS = USE_LINUX_TPROXY=1 USE_STATIC_PCRE=1

Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): yes
Built without zlib support (USE_ZLIB not set)
Compression algorithms supported : identity
Built without OpenSSL support (USE_OPENSSL not set)

Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.

Then you should be alright. Also it may be worth stopping HAProxy and running it in debugmode from the CLI with ‘haproxy -d haproxy.cfg’ (replacing my haproxy.cfg with the location and filename of your config file) this will output all the current status of HAProxy you should then try to connect to the listening IP Address stop the debug and have a read of the outputted debug. If you need any help with that please let us know but obviously replace any real world IP’s with Private addresses to protect yourself.

~Scott

I resolved the iptables problem, I needed a — (double dash) not a single – (dash) for the –set-mark entry.

After fixing this and allowing port 80, I was finally able to use haproxy with iptables running.

Once everything was verified, I added ‘source 0.0.0.0 usesrc clientip’ and again was met again with a 503 error when trying to browse to the website.

I’m running 1.4.7, I didn’t see it in your run down, but do I need to compile iptables with tproxy?

Cheers,
Gilbert