pa77777
pa77777
we have same or maybe similar problem, when my backend is connecting to server over h2c or h2 protocol then haproxy returns 502 in like 1/1000 requests, in normal browser...
after last patch 2.8.6 I see some fixes on ocsp in changlogs ``` - BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch - MINOR: ssl: Use OCSP_CERTID instead of...
``` Message: Process 1867936 (haproxy) of user 992 dumped core. Stack trace of thread 1867937: #0 0x000000000049504e ssl_sock_free_ocsp (haproxy + 0x9504e) #1 0x00000000004841a8 ssl_sock_free_cert_key_and_chain_contents (haproxy + 0x841a8) #2 0x0000000000484c23 ckch_store_free...
yes, I think it's fixed at 2.8.9 version
same with `resolve-opts allow-dup-ip` (I think it's not my case) same with `accepted_payload_size 65535` as I said, sometimes server gets ip adress but his `srv_op_state` is 0 forever, until I...
now i made 200 servers on `google.com` ``` backend server_1 server google.com google.com:443 check no-check-ssl ssl resolve-prefer ipv4 resolvers my_resolver ssl sni ssl_fc_sni verify none backend server_2 server google.com google.com:443...
thank you for fast fix
it's not fixed in new LTS 3.0.4