Re: haproxy, low memory + oom-killer

2010-11-17 Thread MikoĊ‚aj Radzewicz
Hello, Willy, thanks for you email. I will try to fight with the opts and memory? I hope it helps also for low memory. We have 4GB on our 2 nodes servers. On Tue, Nov 16, 2010 at 11:59 AM, Willy Tarreau w...@1wt.eu wrote: Hello, On Wed, Nov 10, 2010 at 04:09:56PM +0100, Miko?aj Radzewicz

RE: Support for SSL

2010-11-17 Thread John Marrett
Bedis, Cause using the cores to decrypt traffic would reduce drastically overall performance. Well, this is what we saw on our HTTP cache server (running CentOS) on 8 cores hardware: when enabling SSL, the performance were so bad that So we kept our old Nortel vpn 3050 to handle the SSL

Re: appsession does not work in Haproxy 1.4.9

2010-11-17 Thread Hogan Yu
Hi Willy, You are right, I misunderstand the log and thanks for your patient. Best Regards, Hogan On Tue, Nov 16, 2010 at 3:03 PM, Willy Tarreau w...@1wt.eu wrote: On Tue, Nov 16, 2010 at 09:03:17AM +0800, Hogan Yu wrote: Hi Willy, Sorry for reply so late, I test my configuration

Re: Support for SSL

2010-11-17 Thread Bedis 9
Hi John, Without entering too much in details, we have a mutualized reverse proxy cache platform in order to accelerate HTTP content (you can call it CDN ;) ) on which we use an HTTP reverse proxy caches coded by a third party company. The reverse proxy software run over a centos linux and has a

RE: Support for SSL

2010-11-17 Thread John Marrett
Bedis, At that kind of connection volume (I assume that your 20k/s includes a certain quantity of keepalive, but a large volume of new connections as well) I'm not that surprised that you needed dedicated hardware. That said, I wouldn't expect the load to necessarily be that bad. I have little

Re: haproxy, low memory + oom-killer

2010-11-17 Thread Willy Tarreau
On Wed, Nov 17, 2010 at 10:03:38AM +0100, Miko?aj Radzewicz wrote: Hello, Willy, thanks for you email. I will try to fight with the opts and memory? I hope it helps also for low memory. We have 4GB on our 2 nodes servers. OK so with 4GB, you're working in PAE mode and it's quite possible to

Re: Support for SSL

2010-11-17 Thread Bedis 9
I wish I could use OpenSource solution. But my company refused so I had to follow their requirements (actually, the requirement was to use this specific software :D) and yes, our oldies do their job on SSL :) (If it works, don't fix it!!!) On Wed, Nov 17, 2010 at 5:05 PM, John Marrett

Re: Support for SSL

2010-11-17 Thread Jason J. W. Williams
You might take a look at one of these: http://www.caviumnetworks.com/processor_security_nitroxLite.htm They ship a modified OpenSSL stack to take advantage of the card. Cavium is what's inside most of the commercial load balancers...including I believe F5. -J Sent via iPhone Is your e-mail

Re: (haproxy) How-TO get HAPROXY to balanace 2 SSL encypted Webservers ?

2010-11-17 Thread toms
Does anyone have an answer to this? Is there a way to balance 2 SSL encrypted (tomcat) webservers with HAPROXY alone? if so can someone please point out some config examples? reading the documentation doesn't give this scenario. tia. On Tue, 16 Nov 2010 09:28:58 -0500 t...@hush.com wrote: What

appsession with option redispatch breaks session stickyness?

2010-11-17 Thread Kris Rasmussen
We are attempting to use the appsession config option to ensure that requests with the same session id in the url query parameters go to the same backend. We are also using the option redispatch setting to ensure that sessions get sent to a new backend when an existing backend goes down. It seems

appsession with option redispatch breaks session stickyness?

2010-11-17 Thread Kris Rasmussen
We are attempting to use the appsession config option to ensure that requests with the same session id in the url query parameters go to the same backend. We are also using the option redispatch setting to ensure that sessions get sent to a new backend when an existing backend goes down. It seems

Re: appsession with option redispatch breaks session stickyness?

2010-11-17 Thread Kris Rasmussen
Upon further inspection, this appears to reproduce even when option redispatch is not set. However, it does not seem to reproduce if I disable http keep-alive with option forceclose. If anyone has any ideas why our client connections would be getting dispatched to different backend when using http

health check on httpd load average

2010-11-17 Thread Maxime Ducharme
Hi guys I would like to accomplish to following with HAProxy : if a server show a load average too high, indicate this server as down and remove it from live traffic. When load avg get to a better state, put server back online. Looking into documentation I think the following could work, I would

Re: health check on httpd load average

2010-11-17 Thread Bedis 9
Hi, I'm not (yet) an HAproxy expert, but your scenario is good enough if the application hosted on the backend servers is sessionless or not... If you don't need session, then your scenario could work. (be careful that all your backend won't answer a 5xx at the same time ;) ) If you need session