cttproxy

Hi,

I've spent the last couple of days on this. We're using haproxy on a CentOS 5.2 machine, and that works fine however we now want to make use of cttproxy, so I grabbed the latest patch from the site, patched the relevant kernel version (2.6.25.11). lsmod returns a tproxy module:

[root#haproxy haproxy-1.3.15.5]# lsmod | grep tproxy
nf_tproxy_core 7168 1 xt_TPROXY,[permanent]
[root#haproxy haproxy-1.3.15.5]#

Which I would assume is correct? (It's the only module with the word tproxy in the name in the whole of /lib/modules)

So, I try to fire up haproxy (compiled with USE_CTTPROXY) and it returns

[root#haproxy haproxy-1.3.15.5]# ./haproxy -f examples/cttproxy-src.cfg
[WARNING] 332/153721 (8424) : parsing [examples/cttproxy-src.cfg:33]:
keyword 'redispatch' is deprecated, please use 'option redispatch' instead.
[WARNING] 332/153721 (8424) : Parsing [examples/cttproxy-src.cfg:47]:
proxy 'sample1' has same name as another proxy.
[WARNING] 332/153721 (8424) : parsing [examples/cttproxy-src.cfg:52]:
keyword 'redispatch' is deprecated, please use 'option redispatch' instead.
[ALERT] 332/153721 (8424) : [./haproxy.main()] Cannot enable cttproxy.
  Make sure you have enough permissions and that the module is loaded.
[root#haproxy haproxy-1.3.15.5]#

I've also patched, and recompiled iptables for good measure and that's not helped - I know there's warnings on that output - but the main cause for concern is the alert. I do notice, however, that the module names at the top of the example config file aren't present in my kernel, could it be that the modules have been renamed and haproxy needs updating to reflect this?

Does anyone have any ideas on what is causing this, or any pointers on how to fix? I don't feel it's relevant to include the config file as it's just the example config file, and I'm not sure what else I can include to give you more information.

Any replies gratefully received

Thanks,

James Received on 2008/11/28 16:44