CPU 100% when waiting for the client timeout

2015-11-19 Thread baiyang
Affect verions: at least 1.5.15 and 1.6.2 Here is the related part in my configuration: timeout client 15m # 客户端响应超时 timeout client-fin 10s # 对客户端连接完成 TCP 4 次挥手超时 timeout connect 5s # HAProxy 向后端 Server 建立连接时的等候超时 timeout server 15m # 服务器端响应超时

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Piotr Kubaj
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/18/15 19:45, Bryan Talbot wrote: > Hard to guess what the issue is but haproxy logging would probably > help. However, the logging configuration is a bit of a mess as it's > configured to be "all on" and "all off" at the same time. There are

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Janusz Dziemidowicz
2015-11-19 11:13 GMT+01:00 Piotr Kubaj : >> 4096 bit DH params will be pretty slow to handshake. Maybe that's >> okay in your circumstance though since you seem to be using this >> for a personal use and not expecting a high connection rate. You >> also have a 8 kbit RSA self signed certificate and

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Piotr Kubaj
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/19/15 14:41, Janusz Dziemidowicz wrote: > 2015-11-19 11:13 GMT+01:00 Piotr Kubaj : >>> 4096 bit DH params will be pretty slow to handshake. Maybe >>> that's okay in your circumstance though since you seem to be >>> using this for a personal u

TCP connections rdp

2015-11-19 Thread Douglas Fabiano Specht
staff, who would have a sample configuration file to use TCP connections on port 3389 RDP and could share? -- Douglas Fabiano Specht

RE: CPU 100% when waiting for the client timeout

2015-11-19 Thread Lukas Tribus
Hello! > Sorry for send it again, I just forgot to provide the attachments. > > Affect verions: at least 1.5.15 and 1.6.2 > > Here is the related part in my configuration: > timeout client 15m # 客户端响应超时 > timeout client-fin 10s # 对客户端连接完成 TCP 4 次挥手超时 > timeout connect 5s # HAProxy 向后端 Ser

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Janusz Dziemidowicz
2015-11-19 15:45 GMT+01:00 Piotr Kubaj : > Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a > lot of questions about constants used by ECDSA, which seem to be > chosen quite arbitrarily by its creator, which happens to be NSA. > These questions of course remain unanswered. Eve

Re: appsession replacement in 1.6

2015-11-19 Thread Sylvain Faivre
Hi Willy, On 11/18/2015 09:31 PM, Willy Tarreau wrote: Hi Sylvain, On Tue, Nov 17, 2015 at 03:09:49PM +0100, Sylvain Faivre wrote: option http-buffer-request maybe you should stick on the header ;-) OK I added "option http-buffer-request", it will help for sure ! What do you mean "stick on

Re: RE: CPU 100% when waiting for the client timeout

2015-11-19 Thread baiyang
These two server are all have the problem: > Can you post the output of haproxy -vv? HA-Proxy version 1.5.15 2015/11/01 Copyright 2000-2015 Willy Tarreau Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS = -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wform

Re: Echo server in Lua

2015-11-19 Thread Willy Tarreau
On Thu, Nov 19, 2015 at 07:00:32AM +, Thrawn wrote: > Hmm...I haven't tuned anything (this is just my workstation, not a server). > /proc/sys/net/core/somaxconn 128 > /proc/sys/net/ipv4/tcp_max_backlog doesn't exist > > /proc/sys/net/ipv4/tcp_max_syn_backlog512 Yep sorry it's this one. > I

Re: RE: CPU 100% when waiting for the client timeout

2015-11-19 Thread Willy Tarreau
Hello, On Fri, Nov 20, 2015 at 12:09:03AM +0800, baiyang wrote: > > Which release did you use previously that worked fine? > I'm using 1.5.14 before upgraded to 1.6.2. I believe everythins is ok before > the last upgrade. I download it from launchpad.net. That's quite problematic. I've just revie

Re: appsession replacement in 1.6

2015-11-19 Thread Willy Tarreau
Hi Sylvain, On Thu, Nov 19, 2015 at 05:04:40PM +0100, Sylvain Faivre wrote: > >What Aleks meant is that you don't need http-buffer-request as it's > >only used to process POST data which isn't your case. > > Oh OK. Well, I did not talk about http-buffer-request in the beginning, > so I thought A

Re: appsession replacement in 1.6

2015-11-19 Thread Aleksandar Lazic
Hi Sylvain & Willy. Am 19-11-2015 19:41, schrieb Willy Tarreau: Hi Sylvain, On Thu, Nov 19, 2015 at 05:04:40PM +0100, Sylvain Faivre wrote: >What Aleks meant is that you don't need http-buffer-request as it's >only used to process POST data which isn't your case. Oh OK. Well, I did not talk a

Re: CPU 100% when waiting for the client timeout

2015-11-19 Thread baiyang
Hi there, > when the problem happens, does haproxy still serve traffic but at 100% CPU or > does it spin on itself and stop processing traffic ? No, the proxy service is not hang even in the spike time. you can verify it by check "haproxy.log" in my first mail. There are a lot of reqeusts have b

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Piotr Kubaj
On 11/19/2015 17:01, Janusz Dziemidowicz wrote: > 2015-11-19 15:45 GMT+01:00 Piotr Kubaj : >> Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a >> lot of questions about constants used by ECDSA, which seem to be >> chosen quite arbitrarily by its creator, which happens to be NS

Re: Owncloud through Haproxy makes upload not possible

2015-11-19 Thread Igor Cicimov
On 20/11/2015 7:23 AM, "Piotr Kubaj" wrote: > > On 11/19/2015 17:01, Janusz Dziemidowicz wrote: > > 2015-11-19 15:45 GMT+01:00 Piotr Kubaj : > >> Now, about RSA vs ECDSA. I simply don't trust ECDSA. There are quite a > >> lot of questions about constants used by ECDSA, which seem to be > >> chosen

Re: Echo server in Lua

2015-11-19 Thread Thrawn
Nope :|. I've increased somaxconn to 512 and tcp_max_syn_backlog to 2048, but with one process, 1M requests, concurrency 500, I still get a bunch of timeouts, and the longest transaction still takes most of the test (eg 32 seconds out of a test that takes 35). Any other obvious possibilities?

Connect() failed using unix sockets

2015-11-19 Thread Greg Wilkins
Hi, I've been using haproxy 1.6.1 to test the newly added unix domain socket connector on the Jetty server. However, under load testing I start to see messages like: Connect() failed for backend frontend: no free ports. If I only get a few of these messages, it does not appear to affect the res

Cargo 化工产品

2015-11-19 Thread zqso
国际DHL(中外运U墩豪)UPS(联合包裹)TNT(天地物B流)FEDAEX(联邦快B递)EMS (中国B邮政)快递服务。创建了一批具有科学管理概念的精良的化工快递服务队G伍,投入到现代化C物B流快递市场。欢迎各位新F老顾客咨询了H解!   联系人:胡V菲(136Z2169Q4223)   QZQ: 277 453 5791Z  Raise yourX smiling face, the Sshadow left behind 助力每笔订M单成功起航!!   

chemical additives for casting, sealing, winding, bonding of electronic components, automobile parts, transformers,etc.

2015-11-19 Thread Nick
To Whom It May Concern:   This is Nicky from Jiaxing Nanyang Wanshixing Chemical Co.,Ltd., our company is located in Jiaxing,zhejiang province,China, we specilize in manufacturing chemical additives-Methyl tetrahydrophthalic anhydride (MTHPA), it's acid anhydri