Hi,
> the odd thing is, if I point the url to the varnish right behind the > haproxy - the issue goes away completely. > > The dump I send you, was from over the internet (a few countries apart) > - so that's probably why the MSS is the size it is :) > > I'll grab a dump on haproxy server tomorrow, while reproducing the > problem with a local client. I think something is seriously wrong on the server side. I took the liberty of accessing http://testkkms.kk.dk myself and and I see the issues as well [1]. But haproxy doesn't behave this way. Can you tell us more about this server? What OS is running? Any firewalls (software or hardware)? Any other "security" product in between? The server is announcing 1380 Byte MSS to me here as well, so this was not something on your client side, but this is server side and thats not very common. There must be some 'interesting' detail about this server that we don't know yet. Regards, Lukas [1] http://cloudshark.org/captures/5b6efeef9fff