Re: proper way to use an acl + stick-table to filter based on conn_cur

Do you know what's the differences between having the sticky-table on the front-end or on the back-end?

Am I right in assuming that that unused keep-alive connections would be counted on the front-end only and in-use connections if the sticky-table is on the back-end (option http-server-close)?

Martin

On 15.03.2011 23:44, Cory Forsyth wrote:
> Interesting...
>
> I was able to get it to work using a stick-table on the front-end, as
> bartavelle mentioned from this URL:
> http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/
>
> I don't know enough C to dig into the code to check on that, though.
>
> On Tue, Mar 15, 2011 at 4:34 PM, Cyril Bonté <cyril.bonte#free.fr
> <mailto:cyril.bonte#free.fr>> wrote:
>
> Hi Willy and Cory,
>
> Le mardi 15 mars 2011 22:17:50, Willy Tarreau a écrit :
> > > Whether I use "src_conn_cur" or sc1_conn_cur, with or without
> the table
> > > argument, this does not work. No matter how many concurrent
> connections
> > > per ip in the stick table, they never get denied.
> > >
> > > Any suggestions?
> >
> > At first glance, I cannot spot anything wrong.
>
> I think there's a bug in the function acl_fetch_src_conn_cur() :
> its code contains return acl_fetch_conn_cnt(...)
> where it probably should be return acl_fetch_conn_cur(...)
>
> Sorry, I can't test it tonight but maybe this can help you.
>
> --
> Cyril Bonté
>
>
Received on 2011/03/17 10:30