Hi @Willy
I compile the source with your make parameter like this:
haproxy -vv
HA-Proxy version 1.7.5 2017/04/03
Copyright 2000-2017 Willy Tarreau <wi...@haproxy.org>
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -pg -O2 -fwrapv -g -fno-strict-aliasing
-Wdeclaration-after-statement -DTCP_USER_TIMEOUT=18
OPTIONS = USE_LINUX_TPROXY=1 USE_ZLIB=1 USE_OPENSSL=1 USE_PCRE=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.7
Running on zlib version : 1.2.7
Compression algorithms supported : identity("identity"),
deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
Built with OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
Running on OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.32 2012-11-30
Running on PCRE version : 8.32 2012-11-30
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built without Lua support
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
Available filters :
[COMP] compression
[TRACE] trace
[SPOE] spoe
When I execute pkill -USR1 haproxy, no gmon.out file created in the file
system, Google says need -pg paramater, but from above I have add that, not
sure why I'm not familiar with gcc and related.
On Tue, Apr 25, 2017 at 12:20 AM, Willy Tarreau <w...@1wt.eu> wrote:
> Hi Cyril,
>
> On Mon, Apr 24, 2017 at 06:09:11PM +0200, Cyril Bonté wrote:
> > Hi Willy,
> >
> > > De: "Willy Tarreau" <w...@1wt.eu>
> > > Ŕ: "jaseywang" <jaseyw...@gmail.com>
> >
> > [...]
> >
> > > > Below is the data during benchmark:
> > > > *maxsock = *1000036; *maxconn = *500000; *maxpipes = *0
> > > > current conns = 7488; current pipes = 0/0; conn rate = 322/sec
> > > > Running tasks: 7366/7449; idle = 0 %
> > >
> > > This one tends to rule out the task_is_expired() bug because the idle
> > > time is null, so you're running at 100% CPU. But 100% CPU for 322
> > > conn/s
> > > seems almost impossible to me. Even my ALOHA-pocket powered over USB
> > > and running on a 400 MHz fanless MIPS does 3 or 5 times more.
> >
> > Just a quick note : I remember having read that the configuration is
> running
> > with dh-param 4096. It can require a lot more CPU than 2048 dh-params.
>
> Wow, I didn't notice this one. You're totally right then. Maybe nbproc is
> needed on this machine, and the only difference with and without the CDN
> is that the CDN actually supports that large DH params so they are
> computed.
>
> Willy
>
