RE: tcp check health checks with expect fail sometimes

2015-02-12 Thread chriscox
 Is there a problem with health checks and haproxy? Again, using a
 machine
 gun approach on the health check service, we see no problems, but for
 whatever reason, occasionally (maybe 1 out 10, could be more), the
 haproxy
 tcp expect fails. Using tcpdump, seems we're getting the right return
 though.

 Can you share that tcpdump?

 That one is harder to share, difficult to sanitize.



 We're using haproxy 1.15 without pcre expressions.

 There is no such release. What release are you running exactly?

 Dyslexia I guess... I meant 1.5.10




Management is saying we're going to drop haproxy for nginx-plus because of
this problem so last chance if anyone has any ideas on this.

(have a feeling that unless an idea and/or fix comes today, that it
will too late though... but feel free to respond anyhow maybe it will
help somebody else!)






Re: tcp check health checks with expect fail sometimes

2015-02-12 Thread Baptiste
On Fri, Feb 13, 2015 at 12:40 AM, Cyril Bonté cyril.bo...@free.fr wrote:
 Hi,

 Le 12/02/2015 21:23, chris...@endlessnow.com a écrit :

 Is there a problem with health checks and haproxy? Again, using a
 machine
 gun approach on the health check service, we see no problems, but for
 whatever reason, occasionally (maybe 1 out 10, could be more), the
 haproxy
 tcp expect fails. Using tcpdump, seems we're getting the right return
 though.


 Can you share that tcpdump?


 That one is harder to share, difficult to sanitize.



 We're using haproxy 1.15 without pcre expressions.


 There is no such release. What release are you running exactly?


 Dyslexia I guess... I meant 1.5.10




 Management is saying we're going to drop haproxy for nginx-plus because of
 this problem so last chance if anyone has any ideas on this.


 Why not changing Management ? ;-)

 I think you're not using healthchecks the right way.
 Prefer option httpchk to option tcp-check combined tcp-check send,
 and prefer http-check expect instead of tcp-check expect.

 Also, try to upgrade to haproxy 1.5.11 or at least, add a Connection:
 close header in your check.
 http://www.haproxy.org/git?p=haproxy-1.5.git;a=commit;h=a448e16da00374b39ae30d6f5595d4060b140f17


 Last, keep in mind that haproxy will only check strings that feet in the
 buffer.

 Without any logs, it's difficult to say which case you're encountering.




 (have a feeling that unless an idea and/or fix comes today, that it
 will too late though... but feel free to respond anyhow maybe it will
 help somebody else!)







 --
 Cyril Bonté


The feeling I have is that the issue is at the network layer, so
switching to an other product won't fix anything ;)

Chris, just drop me a mail in private with a tcpdump of the error.
also haproxy should report the reason of the fail in a log line, which
can be easily anonymized.
Please share with us these logs information.

Baptiste



Re: tcp check health checks with expect fail sometimes

2015-02-12 Thread Baptiste
On Thu, Feb 12, 2015 at 9:23 PM,  chris...@endlessnow.com wrote:
 Is there a problem with health checks and haproxy? Again, using a
 machine
 gun approach on the health check service, we see no problems, but for
 whatever reason, occasionally (maybe 1 out 10, could be more), the
 haproxy
 tcp expect fails. Using tcpdump, seems we're getting the right return
 though.

 Can you share that tcpdump?

 That one is harder to share, difficult to sanitize.



 We're using haproxy 1.15 without pcre expressions.

 There is no such release. What release are you running exactly?

 Dyslexia I guess... I meant 1.5.10




 Management is saying we're going to drop haproxy for nginx-plus because of
 this problem so last chance if anyone has any ideas on this.

if your managers are willing to pay, why not ordering HAProxy
Enterprise Edition then ???
http://haproxy.com/products/haproxy-enterprise-edition/

And half day of HAProxy prof services to get your problem fixed?
http://haproxy.com/services/haproxy-professional-services/



RE: tcp check health checks with expect fail sometimes

2015-02-11 Thread Lukas Tribus
 Is there a problem with health checks and haproxy? Again, using a machine
 gun approach on the health check service, we see no problems, but for
 whatever reason, occasionally (maybe 1 out 10, could be more), the haproxy
 tcp expect fails. Using tcpdump, seems we're getting the right return
 though.

Can you share that tcpdump?


 We're using haproxy 1.15 without pcre expressions.

There is no such release. What release are you running exactly?


Lukas

  


RE: tcp check health checks with expect fail sometimes

2015-02-11 Thread chriscox
 Is there a problem with health checks and haproxy? Again, using a
 machine
 gun approach on the health check service, we see no problems, but for
 whatever reason, occasionally (maybe 1 out 10, could be more), the
 haproxy
 tcp expect fails. Using tcpdump, seems we're getting the right return
 though.

 Can you share that tcpdump?

That one is harder to share, difficult to sanitize.



 We're using haproxy 1.15 without pcre expressions.

 There is no such release. What release are you running exactly?

Dyslexia I guess... I meant 1.5.10