HAProxy 1.8 takes too long to update new config

2017-12-27 Thread Robin Anil
In Http/2 mode with threads enabled, updating the config on a live serving haproxy server takes several minutes. If I turn this off, the update of config is near instantaneous. The config change itself is just adding a newline in the file. So it feels like haproxy is waiting for connections to

[PATCH] BUILD/SMALL Fixed build on macOS with lua

2017-12-27 Thread Kirill A. Korinsky
Last macOS hasn't support export-dynamic, just remove it --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 2acf5028..19234897 100644 --- a/Makefile +++ b/Makefile @@ -630,7 +630,7 @@ check_lua_inc = $(shell if [ -d $(2)$(1) ]; then echo

Re: bug: mworker unable to reload on USR2 since baf6ea4b

2017-12-27 Thread William Lallemand
On Wed, Dec 27, 2017 at 10:21:25PM +0100, Lukas Tribus wrote: > Hello Pieter, > > > On Tue, Dec 26, 2017 at 1:08 AM, PiBa-NL wrote: > > Hi Lucas, William, > > > > I've made a patch which 'i think' fixes the issue with fclose called 'to > > often?'. > > Can you guys

Re: HTTP/2 Termination vs. Firefox Quantum

2017-12-27 Thread Lucas Rolff
My small site is basically a html page with two pages (home and about for example), each page contains basic markup, some styling and some JavaScript, switching pages tends to replicate the issue every now and then (differs a bit how often it happens, but possibly every 20-30 request or so)

Re: HTTP/2 Termination vs. Firefox Quantum

2017-12-27 Thread Lukas Tribus
Hello Lucas, On Wed, Dec 27, 2017 at 9:24 PM, Lucas Rolff wrote: > Can't even compose an email correctly.. > > So: > > I experience the same issue however with nginx as a backend. > > I tried enabling “option httplog” within my frontend, it's rather easy for > me to

Re: HTTP/2 Termination vs. Firefox Quantum

2017-12-27 Thread Lucas Rolff
I tried enabling “option httplog” within my frontend, I do have the same issue wit

Re: haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Lucas Rolff
- you said that using multiple certs breaks, but did you get a working state in any way ? Actually regarding the multiple certs breaking – I was wrong. So, if I use release 1.8.1 (downloaded from haproxy.org and compiling from source) then my bind works perfectly. If I use release 1.8.2 with

Re: haproxy SSL termination performance

2017-12-27 Thread Willy Tarreau
On Wed, Dec 27, 2017 at 06:06:33PM +, Lucas Rolff wrote: > Hi Willy, > > I ended up adding an actual backend to perform the test (reused my nginx > instance I had already), so the connection between haproxy and nginx would be > a matter of localhost traffic - and I was indeed able to reach

Re: [PATCH]: spoa example build update

2017-12-27 Thread Willy Tarreau
Thank you. I'll check with Christopher once he's back but I think that should be OK this way. I may have a suggestion (we'll edit before merging, don't worry) : On Wed, Dec 27, 2017 at 06:26:56PM +, David CARLIER wrote: > From 2e76de286db0e4672a9173e52a070e4b61452983 Mon Sep 17 00:00:00 2001

Re: Article inquiry on Haproxy.Org

2017-12-27 Thread Willy Tarreau
I must confess I love this one. I hope he didn't expect his inquiry to remain discrete by sending it to the list and being archived forever :-) Feeding the anti-spam with it now. Willy On Wed, Dec 27, 2017 at 06:41:49PM +0800, Daniel Millers wrote: > Hi team at Haproxy > > How are you? > > I

Re: [PATCH]: spoa example build update

2017-12-27 Thread David CARLIER
On 27 December 2017 at 18:18, Willy Tarreau wrote: > Hi David, > > On Wed, Dec 27, 2017 at 01:23:34PM +, David CARLIER wrote: > > diff --git a/contrib/spoa_example/Makefile b/contrib/spoa_example/ > Makefile > > index c44c2b879..71ba6107a 100644 > > ---

Re: haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Willy Tarreau
Hi Lucas, On Wed, Dec 27, 2017 at 04:49:31PM +, Lucas Rolff wrote: > Hi guys, > > I was running haproxy 1.8.1 and testing out http2, for this I require the > alpn h2,http/1.1 in my bind - however when using multiple certificates > together with alpn in 1.8.2 - this seems to break. > > My

Re: haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Olivier Doucet
2017-12-27 19:16 GMT+01:00 Lucas Rolff : > 1.8.2 is the latest version, or do you mean latest version as in compiling > master from git? > Both are OK to test with. > > > Current build config (my 1.8.1 build config is exactly the same, except > version number is

Re: [PATCH]: spoa example build update

2017-12-27 Thread Willy Tarreau
Hi David, On Wed, Dec 27, 2017 at 01:23:34PM +, David CARLIER wrote: > diff --git a/contrib/spoa_example/Makefile b/contrib/spoa_example/Makefile > index c44c2b879..71ba6107a 100644 > --- a/contrib/spoa_example/Makefile > +++ b/contrib/spoa_example/Makefile > @@ -2,12 +2,14 @@ DESTDIR = >

Re: haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Lucas Rolff
1.8.2 is the latest version, or do you mean latest version as in compiling master from git? Current build config (my 1.8.1 build config is exactly the same, except version number is different): HA-Proxy version 1.8.2-08396fa 2017/12/23 Copyright 2000-2017 Willy Tarreau

Re: haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Olivier Doucet
Hi Lucas, There has been so many bugs fixed in HAProxy 1.8.2 you should really check this latest version first, and see if you still have this issue. Olivier 2017-12-27 17:49 GMT+01:00 Lucas Rolff : > Hi guys, > > > > I was running haproxy 1.8.1 and testing out http2,

Re: haproxy SSL termination performance

2017-12-27 Thread Lucas Rolff
Hi Willy, I ended up adding an actual backend to perform the test (reused my nginx instance I had already), so the connection between haproxy and nginx would be a matter of localhost traffic – and I was indeed able to reach about 18k req/s on a single core with keep-alive. I can see that

Re: [PATCH] DOC/MINOR: configuration: typo, formatting fixes

2017-12-27 Thread Willy Tarreau
Hi Davor! On Tue, Dec 26, 2017 at 10:18:34PM +0100, Davor Ocelic wrote: > From e2dcd863484826a6c38509d78845cb1a88b9f5ab Mon Sep 17 00:00:00 2001 > From: Davor Ocelic > Date: Mon, 25 Dec 2017 17:49:28 +0100 Got bored eating chocolates under

Re: haproxy SSL termination performance

2017-12-27 Thread Willy Tarreau
On Tue, Dec 26, 2017 at 10:28:57AM +0100, Jérôme Magnin wrote: > 748 looks like what a single core on a VM can achieve in terms of private key > computation with rsa 2048 certs. You can confirm this by running the following > command in your vm: > > openssl speed rsa2048. > > 21000 is too high

haproxy 1.8.2 ALPN h2 broken?

2017-12-27 Thread Lucas Rolff
Hi guys, I was running haproxy 1.8.1 and testing out http2, for this I require the alpn h2,http/1.1 in my bind – however when using multiple certificates together with alpn in 1.8.2 – this seems to break. My bind looks like this: bind *:443 ssl crt /etc/haproxy/certs/default.pem crt

[PATCH]: spoa example build update

2017-12-27 Thread David CARLIER
Hi, Here a little patch proposal to build the example. Kind regards. Thanks in advance. From e9be79654d9b1f7b63e3f13b9f61b5ad4543cdf3 Mon Sep 17 00:00:00 2001 From: David Carlier Date: Wed, 27 Dec 2017 13:19:14 + Subject: [PATCH] BUILD/SMALL: contrib : spoa example

Article inquiry on Haproxy.Org

2017-12-27 Thread Daniel Millers
Hi team at Haproxy How are you? I came across your excellent site: http://haproxy.org How much would it be for an article placement with a link in the main content area of the article going to a *leading gaming/sports betting site*, taking into account the 3 points below: - We will get