Christopher Faulet comments

Results 470 comments of


                                            Christopher Faulet

Kerberos with Exchange Security Incident

In addition, if you can isolate the issue on a dedicated platform with a low traffic, it could also worth enabling the H1 traces. To do so, you can use...

Kerberos with Exchange Security Incident

Copy that. Well, about your version, 201 known bugs were fixed since the 2.4.24 (https://www.haproxy.org/bugs/bugs-2.4.24.html). But there is no reason to compile a newer version by hand. You can use...

Kerberos with Exchange Security Incident

The best is to send all the output here or by email if it is too sensitive. Thanks !

http-server-close and httpclose has no effect on HAProxy as forward proxy

Here, the tunnel will be established only once. You are using the same proxy, thus on curl side, only one connection is established and only one CONNECT is performed. On...

JWT verification using paths to certificates does not work. jwt_verify doesn't read certificate(s) from path - no files are opened nor certificates within files loaded. Path to pem example breaks tokenisation

So it seems there is no issue here and it is working as designed. So I'm closing. Thanks !

multiple use_backend with maps in a row don't work as documented

So it is more a feature request than a bug. I'm changing the label accordingly.

multiple use_backend with maps in a row don't work as documented

Well, I understand your use case but it is not the way the `use_backend` directive works. So it may be a feature request, to add a new option to not...

HTTP connection upgrade to TCP seems broken since 2.4

HTTP protocol upgrade for requests with a payload are not supported by HAProxy. In early 2.4 releases, a `501-not-implmented` was returned (1d2d77b27f0ed5e05c4fc6b6fdc22fdb16589eef). It was then changed to forward the requests...

HTTP connection upgrade to TCP seems broken since 2.4

Sorry for the delay. Just a little update about this issue. We talked about it with Willy and we will try to fix the issue by deporting the check about...

HTTP connection upgrade to TCP seems broken since 2.4

A fix was pushed to change HAproxy behavior. It is now possible to perform an upgrade with a POST request, but only on H1 server (of course) and only if...