Shakedown Social

0 posts0 participants0 posts today

Nils Goroll 🕊️:varnishcache:<a href="https://toot.community/@jorijn" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@jorijn</a> yes, as of today, the recommended way is to use <a href="https://fosstodon.org/tags/haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> as a combined tls onloader/offloader with the PROXY2 protocol such that haproxy has "zero" configuration: see <a href="http://varnish-cache.org/docs/trunk/users-guide/vcl-backends.html#connecting-through-a-proxy" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://varnish-cache.org/docs/trunk/users-guide/vcl-backends.html#connecting-through-a-proxy</a> and .via in <a href="http://varnish-cache.org/docs/trunk/reference/vcl-backend.html#vcl-backend-7" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://varnish-cache.org/docs/trunk/reference/vcl-backend.html#vcl-backend-7</a> this also works with dns: <a href="https://github.com/nigoroll/libvmod-dynamic/blob/master/src/vmod_dynamic.vcc" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/nigoroll/libvmod-dynamic/blob/master/src/vmod_dynamic.vcc</a>that said, we will do something about this eventually <a href="https://fosstodon.org/tags/varnishcache" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#varnishcache</a>

Mike TobiasDid a quick writeup of how I use <a href="https://infosec.exchange/tags/anubis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#anubis</a> behind <a href="https://infosec.exchange/tags/haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> in my <a href="https://infosec.exchange/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a>.<a href="https://mktbs.net/blog/2025/05/19/running-anubis-behind-haproxy/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mktbs.net/blog/2025/05/19/running-anubis-behind-haproxy/</a>Thanks to <a href="https://pony.social/@cadey" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@cadey</a> for the project. Support them!

Matt "msw" Wilson“AWS-LC looks like a very active project with a strong community. […] Even the recently reported performance issue was quickly fixed and released with the next version. […] This is definitely a library that anyone interested in the topic should monitor.”<a href="https://mstdn.social/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSL</a> <a href="https://mstdn.social/tags/BoringSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BoringSSL</a> <a href="https://mstdn.social/tags/WolfSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WolfSSL</a> <a href="https://mstdn.social/tags/AWSLC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AWSLC</a> <a href="https://mstdn.social/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> <a href="https://mstdn.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mstdn.social/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeSoftware</a> <a href="https://mstdn.social/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://mstdn.social/tags/OSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSS</a> <a href="https://mstdn.social/tags/TLS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLS</a> <a href="https://mstdn.social/tags/QUIC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#QUIC</a> <a href="https://www.haproxy.com/blog/state-of-ssl-stacks" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.haproxy.com/blog/state-of-ssl-stacks</a>

Kevin Karhan :verified:<a href="https://chaos.social/@f4grx" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@f4grx</a> <a href="https://mastodon.social/@nixCraft" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nixCraft</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> not really.<ol><li><a href="https://infosec.space/tags/aws" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aws</a> has pretty chunky blocks like /14.</li><li>They don't use <a href="https://infosec.space/tags/IPv6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv6</a>, only <a href="https://infosec.space/tags/IPv4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IPv4</a>.</li><li>Blocking entrie <a href="https://infosec.space/tags/ASN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASN</a>|s is easy.</li></ol>I do this with <a href="https://infosec.space/tags/pfSense" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pfSense</a> & <a href="https://infosec.space/tags/pfBlockerNG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pfBlockerNG</a> for quite a while…And the same <a href="https://infosec.space/tags/blocklist" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blocklist</a> also works for other applications like <a href="https://infosec.space/tags/nginx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nginx</a>, <a href="https://infosec.space/tags/HAproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAproxy</a>, <a href="https://infosec.space/tags/httpd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#httpd</a>, etc.

Stefano MarinelliGoing on with <a href="https://fedihome.stefanomarinelli.it?t=haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> in front of <a href="https://fedihome.stefanomarinelli.it?t=snac2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#snac2</a> - I've just tested an interesting caching for json response. This will surely help instances like FediMeteo. It's not struggling, but I love optimizing stuff!

Stefano MarinelliQuestion: Nginx or HAProxy as a reverse proxy? I’ve tested both. In some cases, I still need nginx, while in others, after a closer look, it’s not necessary. Performance, etc. Opinions from those who use/have used both?<a href="https://mastodon.bsd.cafe/tags/nginx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nginx</a> <a href="https://mastodon.bsd.cafe/tags/haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> <a href="https://mastodon.bsd.cafe/tags/reverseproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reverseproxy</a> <a href="https://mastodon.bsd.cafe/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a> <a href="https://mastodon.bsd.cafe/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SysAdmin</a>

ScriptFanix ❤️ ⏚ ⸫The above applies if the client reports "NS_PARTIAL_TRANSFER" and the stream state at disconnection reported by <a href="https://maly.io/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> is "cD"Stream state at disconnection: <a href="http://docs.haproxy.org/3.0/configuration.html#8.5" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://docs.haproxy.org/3.0/configuration.html#8.5</a>

ScriptFanix ❤️ ⏚ ⸫random <a href="https://maly.io/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> tip:"My app has an endpoint that streams data for a long time, and my clients keep getting disconnected". They're probably disconnected because, when data is streaming, HAProxy doesn't hear back from the client. You need to increase "timeout client", but you probably don't want to do that site-wide. Set a timeout specific to that endpoint: http-request set-timeout client 2h if { path -m beg /index.php/apps/music/api/ }

Kushal Das :python: :tor:Who are the <a href="https://toots.dgplug.org/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> experts in my timeline?

Kushal Das :python: :tor:Not reading the <a href="https://toots.dgplug.org/tags/limitations" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#limitations</a> of <a href="https://toots.dgplug.org/tags/cache" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cache</a> in <a href="https://toots.dgplug.org/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> was a mistake <a href="https://www.haproxy.com/documentation/haproxy-configuration-manual/latest/#6.1" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.haproxy.com/documentation/haproxy-configuration-manual/latest/#6.1</a> Should have read the documentation first.

daniel:// stenberg://<a href="https://mastodon.social/tags/openssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openssl</a> 3 does not seem to perform very well against the competition, as Willy of <a href="https://mastodon.social/tags/haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> fame details here: <a href="https://github.com/haproxy/haproxy/issues/2454#issuecomment-2353243899" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/haproxy/haproxy/issues/2454#issuecomment-2353243899</a>

ijWhen I want to use <a href="https://nerdculture.de/tags/haproxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haproxy</a> on <a href="https://nerdculture.de/tags/pfsense" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pfsense</a> to access one of my Mastodon instances, I get this error: 400 Bad Request The plain HTTP request was sent to HTTPS port nginx/1.22.1<a href="https://nerdculture.de/tags/Nginx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nginx</a> is configured to listen on https, haproxy is configured to forward to https with ssl enabled and accessing the website is done in browser by using https. I have no idea why nginx thinks that the access is done by plan http... Any ideas, dear <a href="https://nerdculture.de/tags/followerpower" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#followerpower</a>?

ScriptFanix ❤️ ⏚ ⸫<a href="https://maly.io/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a> Moi c'est ScriptFanix, je suis passionné par l'informatique, et par un grand coup de chance j'ai pu en faire mon métier. J'ai passé plus de 10 ans en tant qu'<a href="https://maly.io/tags/adminsys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#adminsys</a>, mais maintenant je suis ingénieur support chez <a href="https://maly.io/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> Technologies. Du coup maintenant j'aide les adminsys ! Je fais aussi de la musique (<a href="https://maly.io/tags/Techno" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Techno</a>, <a href="https://maly.io/tags/Dubstep" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dubstep</a>): <a href="https://djblackred.bandcamp.com" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://djblackred.bandcamp.com</a> et <a href="https://music.scriptfanix.fr/channels/psylodrumean/episodes" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://music.scriptfanix.fr/channels/psylodrumean/episodes</a>Ha et aussi, je suis <a href="https://maly.io/tags/ActuallyAutistic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActuallyAutistic</a>, diagnostiqué début 2023.

Jeff<a href="https://toot.thedoodleproject.net/@derek" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@derek</a> Ah, yes, same here on the <a href="https://fenetre.dev/tags/NGINX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NGINX</a> front. That or <a href="https://fenetre.dev/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a> or <a href="https://fenetre.dev/tags/Apache" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apache</a>.. I have yet to find the right place to use <a href="https://fenetre.dev/tags/Traefik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Traefik</a> in lieu of the others. Same for service mesh in general.

Jeff<a href="https://mastodon.tech/users/y3mz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@y3mz</a> <a href="https://bsd.network/@lattera" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@lattera</a> I really like <a href="https://fenetre.dev/tags/pfSense" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pfSense</a> over the <a href="https://fenetre.dev/tags/UDMPRO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UDMPRO</a> but I admit I'm not a firewall expert and still have more to learn. I do have <a href="https://fenetre.dev/tags/tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tailscale</a> setup on my pfSense VM and use it as VPN to get back into my network while I'm remote. It's pretty nice. I hadn't considered a vps with a proxy that forwards to my home network via Tailscale. That's a good idea. I use <a href="https://fenetre.dev/tags/NGINX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NGINX</a> , <a href="https://fenetre.dev/tags/HAProxy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HAProxy</a>, and <a href="https://fenetre.dev/tags/varnish" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#varnish</a> a lot.No, I haven't met <a href="https://bsd.network/@lattera" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@lattera</a> - nice to meet you. I like <a href="https://fenetre.dev/tags/BSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BSD</a> but prefer <a href="https://fenetre.dev/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>.

Recent searches

Search options

Administered by:

Server stats:

#haproxy