multicerts bug?

2016-08-19 Thread Josh Gibson
http://cbonte.github.io/haproxy-dconv/1.7/configuration.html#ssl-default-bind-ciphers This states the following: There are cases where it is desirable to support multiple key types, e.g. RSA and ECDSA in the cipher suites offered to the clients. This allows clients that support EC certificates

Re: haproxy does not correctly handle MSS on Freebsd

2016-08-19 Thread Lukas Tribus
Hi Simon, Am 19.08.2016 um 12:41 schrieb k simon: Hi,List: Haproxy's throughput is much less than nginx or squid on FreeBSD and it's high cpu usage often. When I investigate it a bit more, I found haproxy does not correctly handle MSS on FreeBSD. Your kernel decides the segment size of

Re: haproxy does not correctly handle MSS on Freebsd

2016-08-19 Thread k simon
Hi,List: Haproxy's throughput is much less than nginx or squid on FreeBSD and it's high cpu usage often. When I investigate it a bit more, I found haproxy does not correctly handle MSS on FreeBSD. 1. When haproxy bind to a physical interface and change net.inet.tcp.mssdflt to a large value.

haproxy does not correctly handle MSS on Freebsd

2016-08-19 Thread k simon
Hi,List: Haproxy's throughput is much less than nginx or squid on FreeBSD and it's high cpu usage often. When I investigate it a bit more, I found haproxy does not correctly handle MSS on FreeBSD. 1. When haproxy bind to a physical interface and change net.inet.tcp.mssdflt to a large value.