Re: proper way to use an acl + stick-table to filter based on conn_cur

Interesting...

I was able to get it to work using a stick-table on the front-end, as bartavelle mentioned from this URL:
http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/

<http://tehlose.wordpress.com/2010/12/15/fun-stuff-with-latest-haproxy-version/>I don't know enough C to dig into the code to check on that, though.

On Tue, Mar 15, 2011 at 4:34 PM, Cyril Bonté <cyril.bonte#free.fr> wrote:

> Hi Willy and Cory,
>
> Le mardi 15 mars 2011 22:17:50, Willy Tarreau a écrit :
> > > Whether I use "src_conn_cur" or sc1_conn_cur, with or without the table
> > > argument, this does not work. No matter how many concurrent connections
> > > per ip in the stick table, they never get denied.
> > >
> > > Any suggestions?
> >
> > At first glance, I cannot spot anything wrong.
>
> I think there's a bug in the function acl_fetch_src_conn_cur() :
> its code contains return acl_fetch_conn_cnt(...)
> where it probably should be return acl_fetch_conn_cur(...)
>
> Sorry, I can't test it tonight but maybe this can help you.
>
> --
> Cyril Bonté
>

-- 
[image: Follow me on twitter] <http://movableink.com/twitter_pics/244/link>get
your own Movable Ink <http://movableink.com/?s=sig>