ThaDon's questions

I have a need to transform the following url (not on the client/browser, but rather between the frontend and backend):

from:

http://myhost.com/opt-in/<some_long_guid>.html

to:

http://myhost.com/api/distributions/<some_long_guid>/opt-in

And then at this point choose an appropriate backend. My haproxy.conf file looks like so:

frontend www-ssl
   #re-write the url from /opt-in/<dist_id>.html to /api/distributions/<dist_id>/opt-in

   acl url_opt-in path_beg /opt-in
   reqrep ^([^\ :]*)\ /opt-in/(.*)\.html     \1\ /api/distributions/\2/opt-in if url_opt-in

   acl url_api path_beg /api/

   #choose the api backend if the path starts with /api
   use_backend api-backend if prod url_api

backend api-backend
   server app-1 10.132.93.224:8080 check
   #get rid of the /api part when forwarding to the backend
   reqrep ^([^\ :]*)\ /api/(.*)     \1\ /\2

I have confirmed that hitting http://myhost.com/api/distributions/<some_long_guid>/opt-in directly works.

However hitting http://myhost.com/opt-in/<some_long_guid>.html gives a 505 - The server does not support the HTTP protocol version used in the request.

Can anyone see why I might be facing this problem?

EDIT: I confirmed that my backend is receiving the request and it is reporting back this 505. I'm trying to see if I can dump the raw-request to see what's happening.

Summary: I'd like to connect to my VPN and have access to certain servers, but for all other traffic I'd like to use my regular networking.

I've setup an OpenVPN server on my VPS, my server.conf file looks like so:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log         /var/log/openvpn.log
verb 4
push "route 10.132.0.0 255.255.0.0"

I use the following .ovpn file to setup the VPN Connection:

client
dev tun
proto udp
remote <my.vpn.server.com> 1194
nobind
user nobody
group nogroup
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
<ca>....</ca>
<cert>...</cert>
<key>...</key>

Finally, in the Network Manager for the VPN Connection, under IPv4 Settings I have made sure to set the "Method" to "Automatic (VPN) addresses only".

VPN connects fine, I can access all the internal servers I need (10.132.x.x), however I cannot access anything else (like google.com). I'd like my eth0 settings to be used for everything except for the 10.132.x.x IPs which I would like routed through the VPN.

P.S. based on other articles I've tried using no-pull in the .ovpn file and adding in my route settings there but to no avail.

EDIT 1:

Results of running ip a and traceroute while connected to VPN:

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 08:00:27:dc:a6:ef brd ff:ff:ff:ff:ff:ff
    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic eth0
       valid_lft 86320sec preferred_lft 86320sec
    inet6 fe80::f3d1:6eb3:e13e:d61b/64 scope link 
       valid_lft forever preferred_lft forever
15: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
    link/none 
    inet 10.8.0.6 peer 10.8.0.5/32 brd 10.8.0.6 scope global tun0
       valid_lft forever preferred_lft forever

$ traceroute google.com
google.com: Temporary failure in name resolution
Cannot handle "host" cmdline arg `google.com' on position 1 (argc 1)

EDIT 2: results of ip r

$ ip r
default via 10.8.0.5 dev tun0  proto static  metric 50 
default via 10.0.2.2 dev eth0  proto static  metric 100 
10.0.2.0/24 dev eth0  proto kernel  scope link  src 10.0.2.15  metric 100 
10.8.0.1 via 10.8.0.5 dev tun0  proto static  metric 50 
10.8.0.5 dev tun0  proto kernel  scope link  src 10.8.0.6  metric 50 
10.132.0.0/16 via 10.8.0.5 dev tun0  proto static  metric 50 
104.236.239.153 via 10.0.2.2 dev eth0  proto static  metric 100 
169.254.0.0/16 dev eth0  scope link  metric 1000 

Have a situation where we have an application log sitting out on an AIX server. The log is being continually written to from the application, and we have users on Windows who want to view the file. What they've been doing is using WinSCP to transfer the file to their desktop and they open it using a text editor.

What I think might be happening is scp is locking the file for the duration of the transfer, and the application ceases to be able to write to the file. The reason I believe this is the log file will stop growing at random points during the day.

Is that what perhaps is going on?

We don't have a common set of drive mappings at our company for certain network shares. Inevitably, someone will create a custom drive mapping to a folder, then they will link to a document under that drive mapping and either embed the link into an email or word document.

Of course, nobody else has this drive mapping on their computer. Is there anyway I can tell my users how to make a proper link to a document which lives out on a fileshare such that, if it's not on one of the standard mapped drives they can obtain the full UNC path to the document? Something easier for them than having to drop to a command prompt, type "net use", copy the UNC path for the drive, then concatenate that onto the rest of the path to the file.

Phew. If such a feature or such a shell extension exists, I would love to know.

OS is Windows XP.