Hi,
I have tested the Debian upgrade from jessie to strech on a test-box and
now my config doens't work anymore with haproxy 1.7.5.
I also tested it an a jessie box with backported haproxy 1.7.5. I see
the same error there.
My config for looks like this:
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
user haproxy
group haproxy
daemon
stats socket /var/run/haproxy-admin.sock user root group root
mode 0600 level admin
stats socket /var/run/haproxy.sock user root group nagios mode 0660
stats bind-process 1
maxconn 40000
tune.bufsize 24576
tune.chksize 24576
ssl-default-bind-ciphers
ECDHE+aRSA+AES256+GCM+SHA384:ECDHE+aRSA+AES128+GCM+SHA256:ECDHE+aRSA+AES256+SHA384:ECDHE+aRSA+AES128+SHA256:ECDHE+aRSA+AES256+SHA:ECDHE+aRSA+AES128+SHA:AES256+GCM+SHA384:AES128+GCM+SHA256:AES128+SHA256:AES256+SHA256:DHE+aRSA+AES128+SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4
ssl-default-bind-options no-sslv3 no-tls-tickets
tune.ssl.default-dh-param 2048
defaults
log global
mode http
option httplog
option dontlognull
option socket-stats
option redispatch # Try another server in case of
connection failure
option contstats # Enable continuous traffic
statistics updates
option abortonclose
timeout client 7200s #alctl: client inactivity
timeout server 7200s #alctl: server
inactivity timeout
timeout connect 5s # 5 seconds max to connect or
to stay in queue
timeout queue 30s # 30 seconds max queued on load
balancer
peers testha-cluster
peer testha1 128.130.xx.yy1:1024
peer testha2 128.130.xx.yy2:1024
listen mail-exchtest-smtp
bind 128.130.xx.yy6:25 transparent name smtp
bind 128.130.xx.yy6:587 transparent name submission
mode tcp
log-format %ci:%cp\ [%t]\ %ft\ %s\ %si:%sp\ %Tw/%Tc/%Tt\ %B\
%ts\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq
balance roundrobin
stick-table type ip size 20k peers testha-cluster
stick on src
maxconn 8765
option tcp-check
tcp-check connect port 25
tcp-check expect string 220
tcp-check connect port 587
tcp-check expect string 220
server mbx13a 128.130.xx.zz1: maxconn 5000 check
server mbx13b 128.130.xx.zz2: maxconn 5000 check
server mbx13c 128.130.xx.zz3: maxconn 5000 check
server mbx13d 128.130.xx.zz4: maxconn 5000 check
This config works in 1.5.8 but fails to tcp-check in 1.7.5.
The errors in the logfile look like this:
Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13a
is DOWN, reason: Socket error, info: "No port available for the TCP
connection", check duration: 0ms. 3 active and 0 backup servers left. 0
sessions active, 0 requeued, 0 remaining in queue.
Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13b
is DOWN, reason: Socket error, info: "No port available for the TCP
connection", check duration: 0ms. 2 active and 0 backup servers left. 0
sessions active, 0 requeued, 0 remaining in queue.
Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13c
is DOWN, reason: Socket error, info: "No port available for the TCP
connection", check duration: 0ms. 1 active and 0 backup servers left. 0
sessions active, 0 requeued, 0 remaining in queue.
Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13d
is DOWN, reason: Socket error, info: "No port available for the TCP
connection", check duration: 0ms. 0 active and 0 backup servers left. 0
sessions active, 0 requeued, 0 remaining in queue.
Jun 19 10:52:57 testha2 haproxy[5042]: proxy mail-exchtest-smtp has no
server available!
I haven't found any messages with this bug and how to fix it,
Thanks
Philipp
--
-----------------------------------------------------------------------
DI Mag. Philipp Kolmann mail: kolm...@zid.tuwien.ac.at
Technische Universitaet Wien web: www.zid.tuwien.ac.at
Zentraler Informatikdienst (ZID) tel: +43(1)58801-42011
Wiedner Hauptstr. 8-10, A-1040 Wien DVR: 0005886
-----------------------------------------------------------------------
