I apologize the version is 1.6.5. I built it myself with zlib, openssl,
pcre and linux2628 and I run it on CentOS 6.7.
I had several crashes happening starting from 1.6.4 but they were related
to zlib which also was weird
Apr 21 15:11:25 node1lvs1-la kernel: haproxy[15586]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fff12d6e9d8 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
Apr 21 15:26:03 node1lvs1-la kernel: haproxy[23231]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fffe19228f8 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
Apr 21 15:28:25 node1lvs1-la kernel: haproxy[23809]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fff05fdf728 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
Apr 21 15:41:59 node1lvs1-la kernel: haproxy[24005]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fffdb690788 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
May 5 16:26:26 node1lvs1-la kernel: haproxy[26050]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fff84c41e08 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
I build 1.6.5 yesterday simply out of desperation as couldn't find anything
on the web other then one post in 2013 which was supposedly fix by project
maintainer then,
But it didn't help
May 10 14:25:24 node1lvs1-la kernel: haproxy[18206]: segfault at 3dbed94000
ip 0000003dbfe02866 sp 00007fff9670ae58 error 4 in
libz.so.1.2.3[3dbfe00000+15000]
So I updated zlib to 1.2.7-15 building rpm from CentOS 7 repo.
At that point I had the crash with different data
May 10 17:36:33 node1lvs1-la kernel: haproxy[24074]: segfault at 3dbed94000
ip 0000003dbea897fb sp 00007fffc7278e68 error 4 in libc-2.12.so
[3dbea00000+18a000]
I tested hardware including memory and it all passed the diagnostic tests.
I upgraded kernel from 3.8 to 4.5.1, again not sure if this will make any
sense.
This morning again
May 11 06:14:34 node1lvs1-la kernel: haproxy[10599]: segfault at 3dbed94000
ip 0000003dbea8993e sp 00007ffeaec50968 error 4 in libc-2.12.so
[3dbea00000+18a000]
Here is -vv
haproxy -vv
HA-Proxy version 1.6.5 2016/05/10
Copyright 2000-2016 Willy Tarreau <wi...@haproxy.org>
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -m64 -march=x86-64 -O2 -g -fno-strict-aliasing
-Wdeclaration-after-statement
OPTIONS = USE_ZLIB=1 USE_OPENSSL=1 USE_PCRE=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.7
Compression algorithms supported : identity("identity"),
deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
Built with OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
Running on OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 7.8 2008-09-05
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built without Lua support
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
Haproxy.cfg
global
debug
maxconn 4096
user haproxy
group haproxy
daemon
# nbproc 16
#ca-base /etc/ssl
#crt-base /etc/ssl
log 127.0.0.1:514 local2 debug
tune.ssl.default-dh-param 2048
tune.zlib.windowsize 15
defaults
log global
option tcplog
option httplog
option logasap
maxconn 4096
mode http
# Add x-forwarded-for header.
option forwardfor
option originalto
option http-pretend-keepalive
option http-server-close
timeout connect 5s
timeout client 30s
timeout server 30s
# Long timeout for WebSocket connections.
timeout tunnel 1h
# Gzip some content back to client
compression algo deflate gzip
compression type text/html text/plain text/javascript
application/javascript application/xml text/css
listen admin_stats
bind *:8800
mode http
stats enable
stats hide-version
stats uri /stats
stats refresh 10s
stats realm Haproxy\ Statistics
stats auth xcastadmin:Antilopa!
backend http_redir
mode http
option nolinger
server web xxxx
I have multiple other files separated in conf.d, I can ship them to you but
I am not sure what is the best way to do it.
Also how do you configure haproxy to generate a meaningful coredump in
cases like this ?
On Wed, May 11, 2016 at 6:13 AM, Nenad Merdanovic <ni...@nimzo.info> wrote:
> Hello,
>
> On 5/11/2016 10:16 AM, Alex Litvak wrote:
> > Haproxy 1.6.15 crashes with following error
> >
> > haproxy[24074]: segfault at 3dbed94000 ip 0000003dbea897fb sp
> > 00007fffc7278e68 error 4 in libc-2.12.so[3dbea00000+18a000]
> >
> >
>
> Are you able to reliably reproduce this? Please post the output of
> 'haproxy -vv', send an anonymized version of your configuration file. I
> am not sure what you mean by 1.6.15, because 1.6.5 was just released,
> but haproxy -vv output will clear that up.
>
> Regards,
> Nenad
>
