Re: Question concerning "option forwardfor" and HTTP keep-alive

Thnaks for the precision.

Maybe we can add some other string and not bother with the stunnel one when it is there !

Like this:

option forwardfor header X-Forwarded-For-Haproxy

Or I see that It can be a network so this should be fine if all my stunnel are in this subnet

option forwardfor except 10.222.0.0/27

Again thanks for youre great support Willy.

Guillaume

2011/8/4 Willy Tarreau <w#1wt.eu>

> On Thu, Aug 04, 2011 at 02:35:29PM -0400, Guillaume Bourque wrote:
> > Hi all,
> >
> > I'm reading again the documentation here
> > http://haproxy.1wt.eu/download/1.4/doc/configuration.txt
> >
> > and I dont see how I can do multiple except,
>
> It is not possible, "except" is an optional field used to refine the
> option. When we later support pattern extraction it will be easier,
> as you'll simply add the header and the client's IP on certain conditions.
>
> > I know I can use 1 optin forward for in each frontend cause I have
> multiple
> > frontend section maybe it's the way to do it ?
>
> If you need to have a different option for each frontend, then yes it
> might be the solution you're looking for.
>
> > It would be nice to add a note in the documentation how we can put
> mutliple
> > "option forwardfor except"
>
> It's really not planned. In fact, "option forwardfor" was designed to be
> inconditional. With SSL offloaders, it became clear that being able to
> add an exception for the offloader address was needed. But that's still
> it : an exception.
>
> Regards,
> Willy
>
>

-- 
Guillaume Bourque, B.Sc.,
consultant, infrastructures technologiques libres
514 576-7638,  http://ca.linkedin.com/in/GuillaumeBourque/fr