Re: nbproc 1 vs >1 performance

2016-04-13 Thread Willy Tarreau
Hi Lukas, On Thu, Apr 14, 2016 at 12:14:15AM +0200, Lukas Tribus wrote: > For example, the following configuration load balances the traffic across > all 40 processes, expected or not? > > frontend haproxy_test > bind-process 1-40 > bind :12345 process 1 It's not expected. What is

Re: nbproc 1 vs >1 performance

2016-04-13 Thread Lukas Tribus
Hi Christian, Willy, Am 13.04.2016 um 12:58 schrieb Christian Ruppert: With the first config I get around ~30-33k requests/s on my test system, with the second conf (only the bind-process in the frontend section has been changed!) I just get around 26-28k requests per second. I could get

[PATCH] use SSL_CTX_set_ecdh_auto() for ecdh curve selection

2016-04-13 Thread David Martin
This is my first attempt at a patch, I'd love to get some feedback on this. Adds support for SSL_CTX_set_ecdh_auto which is available in OpenSSL 1.0.2. From 05bee3e95e5969294998fb9e2794ef65ce5a6c1f Mon Sep 17 00:00:00 2001 From: David Martin Date: Wed, 13 Apr 2016 15:09:35

Re: Config order -- when will it matter?

2016-04-13 Thread Shawn Heisey
On 4/13/2016 10:46 AM, Shawn Heisey wrote: > I'm working on some changes to a frontend, one of which is moving the > port 80 bind into the same frontend as port 443. > > Which of the many directives that I'm using will be evaluated in order, > and which of them will take effect first no matter

[SPAM] compressionsolution

2016-04-13 Thread jack
Dear Sirs, We are a professional Compression Stocking/NURSE SOCKS OEM/ODM Manufacturer in Taiwan with 20 years experiences. We specialized in manufacturing and designing all types of stockings/supports for Medical & Sports. Please see attachment for some of our representative

Config order -- when will it matter?

2016-04-13 Thread Shawn Heisey
I'm working on some changes to a frontend, one of which is moving the port 80 bind into the same frontend as port 443. Which of the many directives that I'm using will be evaluated in order, and which of them will take effect first no matter where they are? Specific questions: Will the

Re: Haproxy & Kubernetes, dynamic backend configuration

2016-04-13 Thread Smain Kahlouch
Ok thank you, I'll have a look to SmartStack. 2016-04-13 16:03 GMT+02:00 B. Heath Robinson : > SmartStack was mentioned earlier in the thread. It does a VERY good job > of doing this. It rewrites the haproxy configuration and performs a reload > based on changes in a

Re: Haproxy & Kubernetes, dynamic backend configuration

2016-04-13 Thread B. Heath Robinson
SmartStack was mentioned earlier in the thread. It does a VERY good job of doing this. It rewrites the haproxy configuration and performs a reload based on changes in a source database by a polling service on each instance. The canonical DB is zookeeper. We have been using this in production

Re: Haproxy & Kubernetes, dynamic backend configuration

2016-04-13 Thread Smain Kahlouch
Sorry to answer to this thread so late :p due to the fact that this will be changed when the pod is recreated! > Alexis, as i mentionned earlier the idea is to detect these changes by polling in a regular basis the API and change the backend configuration automatically. Using the DNS (addon) is

nbproc 1 vs >1 performance

2016-04-13 Thread Christian Ruppert
Hi, I've prepared a simple testcase: haproxy-moreperformant.cfg: global nbproc 40 user haproxy group haproxy maxconn 175000 defaults timeout client 300s timeout server 300s timeout queue 60s timeout connect 7s timeout

Re: Multiple front ends listening to the same address/port -- want a config error

2016-04-13 Thread Lukas Tribus
Hi, Am 12.04.2016 um 19:39 schrieb Shawn Heisey: I copied a front end to set up a new service on my haproxy install. I changed the name of the front end, but forgot to change the port number on the "bind" option. Haproxy didn't complain about this configuration when I tested for validity, so

Re: TLS+PSK with HAProxy

2016-04-13 Thread Lukas Tribus
Hi Roshan, Am 13.04.2016 um 06:19 schrieb Roshan Pradeep: Hi Could someone please shed some lights how to configure HAProxy to use TLS+PSK? I don't think TLS+PSK is supported. Lukas