Re: Theoretical limits for a HAProxy instance

2022-12-16 Thread Willy Tarreau
On Fri, Dec 16, 2022 at 05:42:50PM +0100, Iago Alonso wrote: > Hi, > > > Ah that's pretty useful :-) It's very likely dealing with the handshake. > > Could you please run "perf top" on this machine and list the 10 top-most > > lines ? I'm interested in seeing if you're saturating on crypto

Re: Followup on openssl 3.0 note seen in another thread

2022-12-16 Thread Willy Tarreau
On Fri, Dec 16, 2022 at 06:58:33AM -0700, Shawn Heisey wrote: > On 12/16/22 01:59, Shawn Heisey wrote: > > On 12/16/22 00:26, Willy Tarreau wrote: > > > Both work for me using firefox (green flash after reload). > > > > It wasn't working when I tested it.  I rebooted for a kernel upgrade and > >

Re: Theoretical limits for a HAProxy instance

2022-12-16 Thread Iago Alonso
Hi, > Ah that's pretty useful :-) It's very likely dealing with the handshake. > Could you please run "perf top" on this machine and list the 10 top-most > lines ? I'm interested in seeing if you're saturating on crypto functions > or locking functions (e.g. "native_queued_spin_lock_slowpath"),

Re: Followup on openssl 3.0 note seen in another thread

2022-12-16 Thread Shawn Heisey
On 12/16/22 01:59, Shawn Heisey wrote: On 12/16/22 00:26, Willy Tarreau wrote: > Both work for me using firefox (green flash after reload). It wasn't working when I tested it.  I rebooted for a kernel upgrade and it still wasn't working. And then a while later I was poking around in my

Re: Followup on openssl 3.0 note seen in another thread

2022-12-16 Thread Shawn Heisey
On 12/16/22 00:26, Willy Tarreau wrote: > Both work for me using firefox (green flash after reload). It wasn't working when I tested it. I rebooted for a kernel upgrade and it still wasn't working. And then a while later I was poking around in my zabbix UI and saw the green lightning bolt.

Re: Followup on openssl 3.0 note seen in another thread

2022-12-16 Thread Shawn Heisey
On 12/16/22 00:01, Willy Tarreau wrote: - if you want to use QUIC, use quictls-1.1.1. Once you have to build something yourself, you definitely don't want to waste your time on the performance-crippled 3.0, and 1.1.1 will change less often than 3.0 so that also means less