LPO Master Class led by Deepak Malhotra, Chief Legal & Administrative Officer and Global Counsel at Fusion Universal

Dear Reader, We at Global Outsourcing Association of Lawyers invite you to participate in our very powerful LPO Master Class led by Deepak Malhotra, Chief Legal Officer & Global Counsel at Fusion Universal, UK. Date: 25 April 2012 Time: 9:00 am PDT/12:00 pm EDT (100-120 minutes) Topic: LPO Busine

haproxy ssh transparent proxy

Sorry for i'm new in haproxy,there is my problem i wanna haproxy to proxy any non-http traffic. And there is my config about it listen tcp-in bind 192.168.137.18: mode tcp tcp-request inspect-delay 5s tcp-request content accept if HTTP

Missing log entries

Hello, I am observing some strange behaviour with haproxy and logging on Ubuntu Oneiric. haproxy is setup to log to /dev/log and logs successfully appear in /var/log/syslog (via rsyslog). Well, some of them do. Some just don't. If I look on the servers we are proxying/load balancing I can see

Re: Performance optimization on VMWare VM's

Hi, How important is it to assign a specific NIC to the single haproxy vm with physical passthrough? Best regards Sebastian On 16.04.2012 07:01, Baptiste wrote: Hey, You have to reserve resources for the VM. FYI, At exceliance, we were able to go up to 55K rps in a VM on a core i7. You'll

HAProxy Hardware LB

Hi, I'm trying to build a small size loadbalancing maschine which fit's into a small 19" rackmountable case. Are there any experiences which some specific hardware, for example ATOM boards or something similiar? Can someone recomment anything special? Best regards Sebastian

HAProxy high SLAB_CACHE

Hi Team, Configured HAProxy for bunch of web servers. It was working smoothly until one fine day I found that on the server where haproxy is running memory utilisation is getting high everyday. Biggest chunk in the memory consumption is in slab_cache which is utilising 90% to 95% of total memory.

Re: nginx alone performs x2 than haproxy->nginx

On 29/04/2012 20:01, Willy Tarreau wrote: What I could suggest would be : - reduce /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_time_wait to 30s - increase /proc/sys/net/netfilter/nf_conntrack_max to 524288 conns. - increase hashsize to 131072 buckets. This will help you support

RE: nginx alone performs x2 than haproxy->nginx

> Note however that you will no longer be able to carry out any  > connection tracking logic on matched packes, including no NAT,  > syncookie protection, etc.  Are you sure syncookie protection doesn't work with "-j NOTRACK"? I don't believe syncookie has anything to do with conntrack at all, i

HAProxy and SSL traffic termination

Hi, We want to perform LB, SSL termination and L7 on HAProxy. Could you please advise the best approach for it? We are interested in max performance and not complicated configuration. If you are already running such configuration, pls share what is the max connection rate you reach. --

Re: nginx alone performs x2 than haproxy->nginx

On Wed, May 02, 2012 at 03:40:58PM +0200, Lukas Tribus wrote: > > > Note however that you will no longer be able to carry out any  > > connection tracking logic on matched packes, including no NAT,  > > syncookie protection, etc.  > > Are you sure syncookie protection doesn't work with "-j NOTRAC

Re: HAProxy and SSL traffic termination

On Wed, May 2, 2012 at 3:46 PM, Alexander Kamardash wrote: > Hi, > > > > We want to perform LB, SSL termination and L7 on HAProxy. Could you please > advise the best approach for it? We are interested in max performance and > not complicated configuration. > > If you are already running such confi

Re: Performance optimization on VMWare VM's

Hey, If you really need to do that for performance purpose, then you should dedicate a server to your LB... cheers On Wed, May 2, 2012 at 12:58 PM, Sebastian Fohler wrote: > Hi, > > How important is it to assign a specific NIC to the single haproxy vm with > physical passthrough? > > Best regar

Re: Missing log entries

Hi, You should enable "http-server-close" option in both frontend and backend or in defaults section. Otherwise, the first request is the only logged (tunnel mode). cheers On Wed, May 2, 2012 at 12:53 PM, Peter Gillard-Moss wrote: > Hello, > > I am observing some strange behaviour with haproxy

Re: Rate limiting based on backend response

Hi, Currently, you can only do this based on source IP address. I know Willy is working to improve this and in1.5-dev9 you'll be able to do it, since you'll be able to track any users using strings (ie your token) then apply conn_rate or sess_rate, http_req_rate, etc... using gpc0 as a trigger. c

Re: Possible to healthy check backend server's link speed?

Hi, There s a "timeout check" you can try to play with, as well as the classical options like inter, rise and fall. cheers On Tue, May 1, 2012 at 5:13 PM, Igor wrote: > Hi, > > Sometimes, some backend servers' link quality become very poor ( test by > wget a test file from server), > they look

Re: SPDY support?

Hi, As far as I know, never. :) On the other hand, HTTP 2.0 may be integrated asap as soon as proposed by IETF. cheers On Tue, May 1, 2012 at 4:05 AM, Joe Stein wrote: > Hi, I was wondering if/when SPDY support might be added to HAPROXY? > > Thanks! > > /* > Joe Stein, 973-944-0094 > http://ww

Re: HAProxy and SSL traffic termination

A fairly easy configuration is to have Pound SSL sitting in front of HAProxy. I don't have benchmark numbers, but the configuration is fairly simple: Pound:443 -> Haproxy:80 (or really any tcp port that haproxy is listening on) Here's most of my pound.cfg file: ListenHTTPS Address 0.0.0.0 Po

RE: HAProxy and SSL traffic termination

Hi, I am pretty sure that termination traffic on Pound, Apache or Nginx will do a work. My question is more about performance of such solution. It will eb a entrance point and I don't want to create a single point of failure. In case of splitting it to 2 LB layers HAProxy-> SSL termination->bac