| *** mpanetta has quit IRC | 00:30 | |
| *** itisha has quit IRC | 00:32 | |
| *** wanghao has joined #openstack-zaqar | 00:55 | |
| *** wanghao has quit IRC | 01:19 | |
| *** wanghao has joined #openstack-zaqar | 01:19 | |
| *** yanyanhu has joined #openstack-zaqar | 01:37 | |
| *** dtrainor has quit IRC | 01:53 | |
| *** yanyanhu has quit IRC | 01:53 | |
| *** yanyanhu has joined #openstack-zaqar | 01:54 | |
| *** dtrainor has joined #openstack-zaqar | 02:12 | |
| *** diga has joined #openstack-zaqar | 03:15 | |
| diga | Hi All | 03:16 |
|---|---|---|
| flwang1 | diga: hi there | 03:19 |
| flwang1 | diga: how can i help? | 03:19 |
| *** dtrainor has quit IRC | 03:27 | |
| diga | flwang1: Hi | 03:31 |
| flwang1 | diga: are you going to use or contribute zaqar? | 03:31 |
| diga | flwang1: Zaqar has implemented Falcon API framework correct ? | 03:31 |
| flwang1 | diga: yes | 03:31 |
| diga | flwang1: So you use gunicorn or HTTP WSGI ?? | 03:32 |
| diga | to run Falcon | 03:32 |
| flwang1 | you can use uwsgi or mod_wsgi as well | 03:32 |
| diga | okay | 03:32 |
| diga | what zaqar uses now ? | 03:33 |
| flwang1 | diga: in devstack, we're using uwsgi | 03:33 |
| diga | flwang1: ok | 03:33 |
| flwang1 | and it's fully depends on the requirements of deployer | 03:33 |
| diga | flwang1: okay | 03:34 |
| flwang1 | back to my question | 03:34 |
| flwang1 | are you going to deploy zaqar? | 03:34 |
| flwang1 | in production, i mean | 03:34 |
| diga | flwang1: what you use for web framework, same WSGI server to run web framework | 03:34 |
| diga | flwang1: I am implementing Falcon for tacker project | 03:34 |
| flwang1 | ah, ok | 03:34 |
| diga | flwang1: will need to use zaqar, but that we plan in next release not now | 03:35 |
| flwang1 | i don't really understand your last question | 03:35 |
| flwang1 | diga: would you mind sending an email to me? flwang@catalyst.net.nz | 03:35 |
| diga | flwang1: back to previous question | 03:35 |
| diga | flwang1: what you use for web framework, same WSGI server to run web framework | 03:36 |
| flwang1 | now i have to run to pick up my son :) | 03:36 |
| diga | flwang1: okay | 03:36 |
| flwang1 | it's time to off in NZ time :D | 03:36 |
| diga | :) NP | 03:36 |
| flwang1 | have a nice weekend, body | 03:36 |
| diga | have a nice weekend you too :) | 03:36 |
| *** flwang1 has quit IRC | 03:40 | |
| *** wanghao_ has joined #openstack-zaqar | 03:48 | |
| *** wanghao has quit IRC | 03:50 | |
| *** wanghao_ has quit IRC | 04:37 | |
| *** wanghao has joined #openstack-zaqar | 04:37 | |
| *** wanghao_ has joined #openstack-zaqar | 04:41 | |
| *** wanghao has quit IRC | 04:43 | |
| *** wanghao_ has quit IRC | 04:45 | |
| *** wanghao has joined #openstack-zaqar | 04:45 | |
| *** diga has quit IRC | 05:01 | |
| *** wanghao_ has joined #openstack-zaqar | 05:05 | |
| *** wanghao has quit IRC | 05:08 | |
| *** dtrainor has joined #openstack-zaqar | 05:24 | |
| *** dtrainor has quit IRC | 06:19 | |
| *** nadya has joined #openstack-zaqar | 06:39 | |
| *** tesseract has joined #openstack-zaqar | 07:11 | |
| *** wxy has quit IRC | 07:28 | |
| *** kgriffs has quit IRC | 07:30 | |
| *** wxy has joined #openstack-zaqar | 07:30 | |
| *** dhellmann has quit IRC | 07:30 | |
| *** kgriffs has joined #openstack-zaqar | 07:34 | |
| *** dhellmann has joined #openstack-zaqar | 07:35 | |
| *** openstackgerrit has joined #openstack-zaqar | 07:47 | |
| openstackgerrit | wanghao proposed openstack/zaqar: Subscription Confirmation Support-3 https://review.openstack.org/389473 | 07:47 |
| openstackgerrit | wanghao proposed openstack/zaqar: Subscription Confirmation Support-3 https://review.openstack.org/389473 | 07:58 |
| *** nadya has quit IRC | 08:18 | |
| *** wanghao_ has quit IRC | 08:20 | |
| *** wanghao has joined #openstack-zaqar | 08:20 | |
| *** wanghao_ has joined #openstack-zaqar | 09:02 | |
| *** nadya has joined #openstack-zaqar | 09:04 | |
| *** wanghao has quit IRC | 09:05 | |
| *** nadya has quit IRC | 09:29 | |
| openstackgerrit | wanghao proposed openstack/zaqar: Subscription Confirmation Support-3 https://review.openstack.org/389473 | 09:43 |
| *** AAzza has quit IRC | 09:57 | |
| *** AAzza has joined #openstack-zaqar | 09:58 | |
| *** wanghao_ has quit IRC | 10:01 | |
| *** openstackgerrit has quit IRC | 10:18 | |
| *** yanyanhu has quit IRC | 10:19 | |
| *** nadya has joined #openstack-zaqar | 10:49 | |
| *** nadya has quit IRC | 11:00 | |
| *** nadya has joined #openstack-zaqar | 11:01 | |
| *** nadya has quit IRC | 11:03 | |
| *** nadya has joined #openstack-zaqar | 11:21 | |
| *** nadya_ has joined #openstack-zaqar | 11:40 | |
| *** nadya has quit IRC | 11:41 | |
| *** nadya_ has quit IRC | 11:44 | |
| *** nadya has joined #openstack-zaqar | 11:45 | |
| *** nadya has quit IRC | 12:24 | |
| *** nadya has joined #openstack-zaqar | 13:06 | |
| *** rbrady-afk is now known as rbrady | 14:02 | |
| *** dtrainor has joined #openstack-zaqar | 14:12 | |
| *** nadya has quit IRC | 14:26 | |
| *** rbrady has quit IRC | 15:20 | |
| *** rbrady has joined #openstack-zaqar | 15:44 | |
| *** mpanetta has joined #openstack-zaqar | 16:01 | |
| *** pcaruana has joined #openstack-zaqar | 16:36 | |
| *** mpanetta has quit IRC | 16:46 | |
| *** mpanetta has joined #openstack-zaqar | 16:47 | |
| *** nadya has joined #openstack-zaqar | 16:52 | |
| *** nadya has quit IRC | 16:52 | |
| *** dtrainor has quit IRC | 17:03 | |
| *** dtrainor has joined #openstack-zaqar | 17:44 | |
| *** pcaruana has quit IRC | 18:26 | |
| *** nadya has joined #openstack-zaqar | 18:31 | |
| *** nadya has quit IRC | 18:34 | |
| *** pcaruana has joined #openstack-zaqar | 18:39 | |
| *** tesseract has quit IRC | 18:53 | |
| *** openstack has joined #openstack-zaqar | 18:58 | |
| *** pcaruana has quit IRC | 19:02 | |
| *** flwang1 has joined #openstack-zaqar | 19:31 | |
| dtrainor | alright, i'm giving up on trying to proxy websockets through apache. i had concerns about that being the right way about it in the first place. in fact, the entire tripleo haproxy config needs to be updated, to include frontend/backend instead of bind/server. this also allows us to use ACLs in haproxy | 19:37 |
| dtrainor | that being said, i get a new error. I'm using haproxy to set an acl when the connection is upgraded to a websocket. The acl works, but then when it hits the backend zaqar websocket transport, I get: WebSocket connection closed: connection was closed uncleanly (missing port in HTTP Host header '8.43.87.242' and server runs on non-standard port 9000 (wss = False)) | 19:38 |
| dtrainor | Doesn't look like zaqar is looking at X-Forwarded-Port either (which I think it should be doing) | 19:39 |
| *** openstackstatus has quit IRC | 19:57 | |
| *** openstack has joined #openstack-zaqar | 19:58 | |
| *** david-lyle is now known as baling-wire | 20:00 | |
| *** openstackstatus has joined #openstack-zaqar | 20:00 | |
| *** ChanServ sets mode: +v openstackstatus | 20:00 | |
| *** dtrainor has quit IRC | 20:02 | |
| *** dtrainor has joined #openstack-zaqar | 20:06 | |
| *** openstackstatus has quit IRC | 20:27 | |
| *** openstack has joined #openstack-zaqar | 20:28 | |
| *** openstackstatus has joined #openstack-zaqar | 20:30 | |
| *** ChanServ sets mode: +v openstackstatus | 20:30 | |
| dtrainor | is autobahn used as the websockets transport that zaqar implements? | 20:36 |
| vkmc | dtrainor, yes | 20:41 |
| vkmc | it uses python autobahn | 20:41 |
| dtrainor | ok, thanks. | 20:42 |
| dtrainor | i think what i'm seeing is that autobahn is making some less than ideal assumptions about the connection that it receives, instead of looking at headers that a proxy (in this case, both httpd and haproxy) provide | 20:43 |
| vkmc | it's possible dtrainor | 20:44 |
| vkmc | which headers are you expecting zaqar to handle? | 20:45 |
| dtrainor | well, i think autobahn is looking for a host header that includes a port. my client (browser) is trying to initiate a connection via wss://8.43.87.242:443/zaqar but i'm wanting haproxy or apache to catch this and forward it to a different backend (the zaqar websocket transport itself) | 20:46 |
| dtrainor | what i end up with is http://pastebin.test.redhat.com/445971 | 20:49 |
| dtrainor | arg. | 20:49 |
| dtrainor | https://hastebin.com/raw/funigenito | 20:49 |
| vkmc | all right | 20:50 |
| therve | dtrainor, Have you set external-port? | 21:02 |
| dtrainor | i have, yes. i set it to port 443 since that's the port that the client will be using | 21:02 |
| therve | It's possible isSecure is not set then? | 21:04 |
| dtrainor | that would make protocol.py:2935 fail yep | 21:05 |
| therve | Probably because you try to terminate ssl on apache, no? | 21:06 |
| therve | Maybe try to set external-port to 80? | 21:06 |
| dtrainor | technically haproxy terminates ssl but yes | 21:06 |
| dtrainor | i get the same error, but i understand what you meant by testing that | 21:08 |
| therve | I don't think you can terminate ssl in haproxy with websocket? | 21:09 |
| therve | I don't know enough about websocket proxying though | 21:10 |
| dtrainor | i don't either, still piecing it together. but i think wss websockets inside of https may not be a great combination | 21:10 |
| therve | But it's something along those lines, I'd say | 21:12 |
| therve | We only support a ws:// URL in zaqar | 21:12 |
| therve | God knows what happens in your case | 21:13 |
| dtrainor | haha | 21:13 |
| *** rbrady is now known as rbrady-afk | 21:15 | |
| dtrainor | based on what i'm able to determine, since the ws connection is technically just http, the websocket gets established using whichever scema - http or https - through the browser, and after https negotiation just like any other data | 21:15 |
| dtrainor | so i am trying to call a backend as ws:// from both apache in haproxy, in my tests | 21:16 |
| therve | dtrainor, Can we see your haproxy config? | 21:16 |
| dtrainor | sure thing - it's messy but you get the jest of it http://pastebin.com/3xFk0Bjz | 21:18 |
| dtrainor | i had most recently been playing around with faking the header sent to the backend by haproxy | 21:18 |
| therve | dtrainor, Why did you comment the "http-request set-header Host" ? | 21:18 |
| therve | That seems it would be the key here | 21:18 |
| dtrainor | because the host does not include a port, since the connection was made to https://foo, so just Proto is set | 21:21 |
| dtrainor | if I'm understanding how this is all coming together, properly | 21:21 |
| therve | RIght. I'd force the host to contain the port | 21:22 |
| dtrainor | In my client configuration I am specifying :443 as the port | 21:22 |
| dtrainor | whether or not that's required I'm not sure, since I still use a scheme of https | 21:22 |
| therve | I'm just trying to reverse engineer https://github.com/crossbario/autobahn-python/blob/master/autobahn/websocket/protocol.py#L2520 | 21:23 |
| dtrainor | i see | 21:25 |
| dtrainor | the error i'm seeing is https://github.com/crossbario/autobahn-python/blob/master/autobahn/websocket/protocol.py#L2540 | 21:27 |
| therve | Not setting external-port may work too | 21:28 |
| therve | Anyway | 21:28 |
| * therve away | 21:28 | |
| dtrainor | thanks for taking a peek! | 21:30 |
| *** baling-wire is now known as david-lyle | 22:26 | |
| *** mpanetta has quit IRC | 23:25 | |
| *** harlowja has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!