RE: tcp check health checks with expect fail sometimes
Is there a problem with health checks and haproxy? Again, using a machine gun approach on the health check service, we see no problems, but for whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy tcp expect fails. Using tcpdump, seems we're getting the right return though. Can you share that tcpdump? That one is harder to share, difficult to sanitize. We're using haproxy 1.15 without pcre expressions. There is no such release. What release are you running exactly? Dyslexia I guess... I meant 1.5.10 Management is saying we're going to drop haproxy for nginx-plus because of this problem so last chance if anyone has any ideas on this. (have a feeling that unless an idea and/or fix comes today, that it will too late though... but feel free to respond anyhow maybe it will help somebody else!)
Re: tcp check health checks with expect fail sometimes
On Fri, Feb 13, 2015 at 12:40 AM, Cyril Bonté cyril.bo...@free.fr wrote: Hi, Le 12/02/2015 21:23, chris...@endlessnow.com a écrit : Is there a problem with health checks and haproxy? Again, using a machine gun approach on the health check service, we see no problems, but for whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy tcp expect fails. Using tcpdump, seems we're getting the right return though. Can you share that tcpdump? That one is harder to share, difficult to sanitize. We're using haproxy 1.15 without pcre expressions. There is no such release. What release are you running exactly? Dyslexia I guess... I meant 1.5.10 Management is saying we're going to drop haproxy for nginx-plus because of this problem so last chance if anyone has any ideas on this. Why not changing Management ? ;-) I think you're not using healthchecks the right way. Prefer option httpchk to option tcp-check combined tcp-check send, and prefer http-check expect instead of tcp-check expect. Also, try to upgrade to haproxy 1.5.11 or at least, add a Connection: close header in your check. http://www.haproxy.org/git?p=haproxy-1.5.git;a=commit;h=a448e16da00374b39ae30d6f5595d4060b140f17 Last, keep in mind that haproxy will only check strings that feet in the buffer. Without any logs, it's difficult to say which case you're encountering. (have a feeling that unless an idea and/or fix comes today, that it will too late though... but feel free to respond anyhow maybe it will help somebody else!) -- Cyril Bonté The feeling I have is that the issue is at the network layer, so switching to an other product won't fix anything ;) Chris, just drop me a mail in private with a tcpdump of the error. also haproxy should report the reason of the fail in a log line, which can be easily anonymized. Please share with us these logs information. Baptiste
Re: tcp check health checks with expect fail sometimes
On Thu, Feb 12, 2015 at 9:23 PM, chris...@endlessnow.com wrote: Is there a problem with health checks and haproxy? Again, using a machine gun approach on the health check service, we see no problems, but for whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy tcp expect fails. Using tcpdump, seems we're getting the right return though. Can you share that tcpdump? That one is harder to share, difficult to sanitize. We're using haproxy 1.15 without pcre expressions. There is no such release. What release are you running exactly? Dyslexia I guess... I meant 1.5.10 Management is saying we're going to drop haproxy for nginx-plus because of this problem so last chance if anyone has any ideas on this. if your managers are willing to pay, why not ordering HAProxy Enterprise Edition then ??? http://haproxy.com/products/haproxy-enterprise-edition/ And half day of HAProxy prof services to get your problem fixed? http://haproxy.com/services/haproxy-professional-services/
RE: tcp check health checks with expect fail sometimes
Is there a problem with health checks and haproxy? Again, using a machine gun approach on the health check service, we see no problems, but for whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy tcp expect fails. Using tcpdump, seems we're getting the right return though. Can you share that tcpdump? We're using haproxy 1.15 without pcre expressions. There is no such release. What release are you running exactly? Lukas
RE: tcp check health checks with expect fail sometimes
Is there a problem with health checks and haproxy? Again, using a machine gun approach on the health check service, we see no problems, but for whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy tcp expect fails. Using tcpdump, seems we're getting the right return though. Can you share that tcpdump? That one is harder to share, difficult to sanitize. We're using haproxy 1.15 without pcre expressions. There is no such release. What release are you running exactly? Dyslexia I guess... I meant 1.5.10