we are in the process of switching from a foundry load balancer (really
old) to haproxy.

we originally went with 1.4 and stunnel, however stunnel caved at 1000
connections and we had to find a new solution, so we are now running 1.5.

we've done a lot of testing, but we feel that we just don't have exactly
what we need, or could use.

we are also running into an error with a large file upload timing out after
10 minutes, and we can't seem to explain it.

below is all the information.


----
HA-Proxy version 1.5-dev22-1a34d57 2014/02/03
Copyright 2000-2014 Willy Tarreau <w...@1wt.eu>

Build options :
  TARGET  = linux2628
  CPU     = generic
  CC      = x86_64-pc-linux-gnu-gcc
  CFLAGS  = -O2 -pipe -fomit-frame-pointer -mno-tls-direct-seg-refs
-fno-strict-aliasing
  OPTIONS = USE_LIBCRYPT=1 USE_GETADDRINFO=1 USE_ZLIB=1 USE_OPENSSL=1
USE_PCRE=1 USE_PCRE_JIT=1

Default settings :
  maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.8
Compression algorithms supported : identity, deflate, gzip
Built with OpenSSL version : OpenSSL 1.0.1e 11 Feb 2013
Running on OpenSSL version : OpenSSL 1.0.1e 11 Feb 2013
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.33 2013-05-28
PCRE library supports JIT : yes
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND

Available polling systems :
      epoll : pref=300,  test result OK
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 3 (3 usable), will use epoll.
---


the config is as follows, please feel free to make fun of us for our severe
lack of proper config.

https://gist.github.com/anonymous/8deb82dba88980e8d243


the multiple frontends for the same thing are for redirects, last night was
a we have to swap it out or we are going to have major problems kind of
night, and i couldn't find an ACL that would match on proxy to do the
correct redirects if it was needed.

anyway, thank you.

mr.npp

Reply via email to