Re: Configuration file issue with ssl/verify ordering

Hi Marshall, Le 07/03/2016 16:56, Marshall, Owen (GE Appliances) a écrit : Hi there, I'm seeing some odd behavior with HAProxy 1.6.3 and the ordering of ssl & verify in my configuration file. I'm not sure if this is truly a bug or a misunderstanding on my part. We are attempting to set up

Configuration file issue with ssl/verify ordering

Hi there, I'm seeing some odd behavior with HAProxy 1.6.3 and the ordering of ssl & verify in my configuration file. I'm not sure if this is truly a bug or a misunderstanding on my part. We are attempting to set up HAProxy to load balance SSL-enabled servers, but aren't currently concerned

Re: Issue with SSL

On Wed, May 13, 2015 at 10:07 AM, Krishna Kumar (Engineering) krishna...@flipkart.com wrote: Hi all, I am having the following problem with SSL + large I/O. Details are: Distribution: Debian 7, Kernel: 3.19.6, ab version: 2.3, haproxy: 1.5.12, nginx: 1.2.1 $ ab -k -n 10 -c 100

Re: Issue with SSL

Hi Baptiste, Thank you very much for the tips. I have nbproc=8 in my configuration. Made the following changes: Added both bind and tune.bufsize changeresult - works. Removed the tune.bufsize result - works. Added bind-process for frontend and backend as:

Re: Issue with SSL

On Wed, May 13, 2015 at 2:16 PM, Krishna Kumar (Engineering) krishna...@flipkart.com wrote: Hi Baptiste, Thank you very much for the tips. I have nbproc=8 in my configuration. Made the following changes: Added both bind and tune.bufsize changeresult - works.

Re: Issue with SSL

Thanks Baptiste. The performance for SSL vs regular is very bad. Could someone help with that? Following is the configuration, test result and the monitoring tool results (the last is interesting). - Configuration file - global daemon maxconn

Issue with SSL

Hi all, I am having the following problem with SSL + large I/O. Details are: Distribution: Debian 7, Kernel: 3.19.6, ab version: 2.3, haproxy: 1.5.12, nginx: 1.2.1 $ ab -k -n 10 -c 100 http://IP:80/128K Works correctly. $ ab -k -n 1 -c 10 https://IP:443/4K Works correctly. $ ab -k -n

AW: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

] Gesendet: Mittwoch, 10. September 2014 07:32 An: Andreas Mock Cc: haproxy Betreff: Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test Hi Andreas, On Tue, Sep 09, 2014 at 03:05:36PM +, Andreas Mock wrote: Hi all, I did the ab test with concurrency

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

On Wed, Sep 10, 2014 at 08:32:05AM +, Andreas Mock wrote: Hi Willy, thank you for your answer. Do you have an explanation for the fact that ab keep-alive without SSL seems to work correct but as soon as SSL is enabled performance degrades as shown? Unfortunately no, I have no

AW: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

: Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test On Wed, Sep 10, 2014 at 08:32:05AM +, Andreas Mock wrote: Hi Willy, thank you for your answer. Do you have an explanation for the fact that ab keep-alive without SSL seems to work correct

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

On Wed, Sep 10, 2014 at 09:21:21AM +, Andreas Mock wrote: Hi Willy, which trace would help? On the server side? Do you mean a TCP dump or which trace do you think of? Yes, a tcpdump with full packets on the server side (clear text) so that we know whether the response is compatible with

Performance issue with SSL and keep alive, weird result of ab test

Hi all, I'm just doing some performance test on a ha-proxy 1.5.4 and 'ab' on the client side: * http = OK * https = OK * https + Keep-Alive = NOT OK (really bad performance) Can someone explain this result to me. What did I miss? Here the relevant config:

[ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

[mailto:andreas.m...@drumedar.de] Gesendet: Dienstag, 9. September 2014 16:34 An: haproxy Betreff: Performance issue with SSL and keep alive, weird result of ab test Hi all, I'm just doing some performance test on a ha-proxy 1.5.4 and 'ab' on the client side: * http = OK * https = OK * https

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

Hi Andreas, On Tue, Sep 09, 2014 at 03:05:36PM +, Andreas Mock wrote: Hi all, I did the ab test with concurrency = 1 and keep-alive. I found the following log entries written by HAProxy. Sep 9 16:54:20 server haproxy[29183]: :60646 [09/Sep/2014:16:54:20.014] fe_ssl_static~

Issue on SSL

I just installed haproxy and it was working fine for two days now. Now, I'll be implementing SSL on my backend server so here I go again. I have configured haproxy and it has cookie enabled to retain sessions since there is authentication involved in the web services. However, it seems it was not

Re: Issue on SSL

I'm now looking into stunnel + haproxy. This is a dumb question for a gnubie like me. How do I patch stunnel-4.22-xforwarded-for.diff? I have unpack stunnel-4.20. Change to that directory and do the command patch ../stunnel4.20.patch. The context of stunnel4.20.patch was