Tag Info

New answers tagged

0

I stumbled across exactly the same issue and I think this is by design. HAProxy has a property fall responsible for this behavior: fall <count> The "fall" parameter states that a server will be considered as dead after <count> consecutive unsuccessful health checks. This value defaults to 3 if unspecified. See also the "check", ...


0

The sentence "172.16/12 has not been enabled by default because it is complex to describe with regular expressions" made me smile when I've read it for the first time. Anyway, here is the regexp including 172.16.0.0/12 addresses too (it's not that complex at all): <Valve className="org.apache.catalina.valves.RemoteIpValve" ...


0

Again, this is very crazy. This seems to happen because of an odd interaction between Bluecoat's OS and (outdated) F5's used at the other end. More specifically, Bluecoat's TCP silly window syndrom (SWS) avoidance algorithm seems to trigger this: https://support.f5.com/kb/en-us/solutions/public/8000/900/sol8927.html Now the question is, would disabling ...


4

Redundancy, resiliency, scalability and flexibility are factors here. Many environments can and do scale beyond a single server in the web-tier. It also makes sense to understand what the realistic bottleneck of the environment is: CPU? RAM? Network?


0

Since you've changed your question completely my original answer (bottom) no longer applies. But one reason that going to https://robert.bob.com/norbert/ goes to backend1 instead of backend2 could be because backend1.bob.com and backend2.bob.com resolve to the same IP on the machine running your nginx proxy. I think this section may also be wrong (I'm not ...


-1

you will have to use a proxy server like squid for example and use a re-director a nice add blocker would be addzapper addzapper is designed for add blocking both are found in Debian as packages you can use apt-get to install squid and addzapper


0

A small addition to the great answer from Xaviar: If you happen to be not so well acquainted with nginx, there's an important difference between adding the slash to the end of the the proxy_pass directive. The following does not work: location ~* ^/dir/ { rewrite ^/dir/(.*) /$1 break; proxy_pass http://backend/; but this one does: location ~* ...


0

There is no reason why that wouldn't work. You have a few open source solutions for a software reverse proxy/load balancer on windows. e.g. Nginx and apache. I like HAProxy in linux but that is not what you are asking for. Don't expect the best performance though, you are using it on your windows server (i.e. not even a dedicated VM) and you are not taking ...


0

If by "proxy server" you mean a web proxy, yes of course you can. Some commercial products aren't certified to be run as VM guests, but there's no technical reason that it can't be made to work, in most cases.


0

In the Ironport web administration page, under Network/Certificates, you can define the various certificates you wish to use for SMTPS and HTTPS. When defining a new certificate, you can upload the (last step) PKCS#12 certificate. After this, you can edit the existing certificate via the same page. At the bottom of the page is a collapsed section ...


0

ahh, I actually found it)) browse.php (Prepare the REQUEST) (line 304): $toSet[CURLOPT_PROXYPORT] = 3128; $toSet[CURLOPT_PROXYTYPE] = "HTTP"; $toSet[CURLOPT_PROXY] = "127.0.0.1";


1

Privoxy is an HTTP proxy. What you're trying to do is feed it intact network packets, which I'm 99% sure it's not going to accept that without some very complex mangle rules in iptables. Instead you should expose the proxy to the VPN (seems like it is already), and push it as a DHCP option to your VPN clients. Instructions for doing that via OpenVPN can be ...


2

You can push proxy configuration to the OpenVPN clients. From the OpenVPN Access Server web interface go to Advanced VPN Settings → Server Config Directives and enter the following directive with your proxy ip/port info. push "dhcp-option PROXY_HTTP 111.222.333.44 8118" I am not sure if all OpenVPN clients support this config. But on IOS it works well.


0

The myIpAddress function is based on the assumption that a host has only a single address. This has never been a valid assumption. A better alternative would be a function returning a list of IP addresses. It appears Microsoft has introduced their own extension doing exactly that. It would make sense for myIpAddress to return the address providing the most ...


0

You specified the command incorrectly. The correct way to type the command would be like this: ssh -o ProxyCommand='ssh -W %h:%p user@intermediate-host' user@target-host If you need this frequently, you can add it to ~/.ssh/config like this: Host target-host User user ProxyCommand ssh -W %h:%p user@intermediate-host Then you only need to type ...


0

It definitely issue with your one of the plugin which you have installed in your wordpress website which is not supporting opcode cache. I would advise go with plugin which contains cache settings and then uninstall it to test how website will work without the specific plugin.


1

There is document on how nginx processes request. In particular that means if you have only one server block then all requests will end up there regardless off Host header. In your case you want to process only requests that match your hosts and ignore others. So you have to declare another server block that will process all unmatched requests. This should ...


4

In case you use nginx as a load-balancer, the stream will be : Redirect : Step 1 : Client => LB (HTTP request) Step 2 : LB => Client (HTTP reply) Step 3 : Client => Backend (HTTP request) Step 4 : Backend => Client (HTTP reply) Proxy : Step 1 : Client => LB (HTTP request) Step 2 : LB => Backend (HTTP request) ...


1

So apparently, the issue was caused by (and this is as reported by my host) some "code" in some plugins that are not compatible with php+APC cache... Don't know if that's really true, but when we changed the handler back to suPHP, the issue resolved! So for (future) people on wordpress + VPS, keep this in mind. If you are going to install some kinda opcode ...


0

No, you must allow the referrals in the firewall. Neither ADLDS not openLDAP will authenticate users. The simplest solution is to put a DC from the other domain in the hub site.


1

You are correct that with the REDIRECT, Squid cannot see the original intended destination IP; instead it will resolve the host provided by the client in the Host: HTTP header, which is mandatory in HTTP 1.1.


0

That is very similar to the gateway. When client host does not know where the destination host reside, it send the packet to the default gateway. And gateway define where that packet should be sent. Transparent proxy do the same. All packets to the xxx.xxx.xxx.xxx:80 are diverted to the port 3128 instead of port mentioned in the packet header. Squid ...


0

1 - you need to plan name resolution. If the clients don't connect to a DNS server that does Internet names, this is expected. TMG can do that for HTTP URLs, but not random no-name stuff, unless you install the Firewall Client on the client computers. 2 - Confused question. Firewall where is on to break this? If you're using the firewall client (is that the ...



Top 50 recent answers are included