Re: SSL, peered sticky tables + nbproc 1?

2014-05-27 Thread Willy Tarreau
Hi Andy, On Tue, May 27, 2014 at 06:00:37PM +0100, Andrew Phillips wrote: Something I overlooked replying to on this thread; BTW, I remember you said that you fixed the busy loop by disabling the FD in the speculative event cache, but do you remember how you re-enable it ? Eg, if all

Re: SSL, peered sticky tables + nbproc 1?

2014-05-18 Thread Andrew Phillips
Willy, Thanks for the response. I wrote the reply as I read through, so it's interesting to see that we've pursued similar lines of thought about how to solve this problem. I think our workload is very different from 'normal'. We have several quite long lived connections, with a modest

Re: SSL, peered sticky tables + nbproc 1?

2014-05-18 Thread Willy Tarreau
Hi Andy, On Sun, May 18, 2014 at 03:16:34PM +0100, Andrew Phillips wrote: Willy, Thanks for the response. I wrote the reply as I read through, so it's interesting to see that we've pursued similar lines of thought about how to solve this problem. I think our workload is very different

Re: SSL, peered sticky tables + nbproc 1?

2014-05-15 Thread Willy Tarreau
Hi James, On Tue, May 13, 2014 at 06:00:13PM +0100, James Hogarth wrote: Hi Willy, Please see the response from our Head of Systems below. Thank you. For ease of discussions, I'm copying him. Andy, please tell me if this is not appropriate. On a side note our initial investigations see

Re: SSL, peered sticky tables + nbproc 1?

2014-05-09 Thread Willy Tarreau
Hi James, On Thu, May 08, 2014 at 08:58:59PM +0100, James Hogarth wrote: On 2 May 2014 20:10, Willy Tarreau w...@1wt.eu wrote: You're welcome. I really want to release 1.5-final ASAP, but at least with everything in place so that we can safely fix the minor remaining annoyances. So if we

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread Willy Tarreau
hi, On Fri, May 02, 2014 at 11:11:39AM -0600, Jeff Zellner wrote: Well, I thought wrong -- I see that peered sticky tables absolutely don't work with multiple processes, and sticky rules give a warning. Would that be a feature on the roadmap? I can see that it's probably pretty non-trivial

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread Bryan Talbot
It sounds like that Jeff ran out of CPU for SSL terminations and that could be addressed as described by Willy here https://www.mail-archive.com/haproxy@formilux.org/msg13104.html and allow him to stay with a single-process stick table for the actual load balancing. -Bryan On Fri, May 2,

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread Willy Tarreau
On Fri, May 02, 2014 at 10:59:00AM -0700, Bryan Talbot wrote: It sounds like that Jeff ran out of CPU for SSL terminations and that could be addressed as described by Willy here https://www.mail-archive.com/haproxy@formilux.org/msg13104.html and allow him to stay with a single-process

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread James Hogarth
On 2 May 2014 19:02, Willy Tarreau w...@1wt.eu wrote: On Fri, May 02, 2014 at 10:59:00AM -0700, Bryan Talbot wrote: It sounds like that Jeff ran out of CPU for SSL terminations and that could be addressed as described by Willy here

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread Jeff Zellner
Great, we'd love to see that. And thanks for the other SSL performance trick. We might be able to make that and some SSL cache tuning work for us, as well. On Fri, May 2, 2014 at 12:23 PM, James Hogarth james.hoga...@gmail.com wrote: On 2 May 2014 19:02, Willy Tarreau w...@1wt.eu wrote: On

Re: SSL, peered sticky tables + nbproc 1?

2014-05-02 Thread Willy Tarreau
Hi James, On Fri, May 02, 2014 at 07:23:21PM +0100, James Hogarth wrote: We've done quite a bit of work on this internally recently to provide SSL multiprocess with sane load balancing. There's a couple of small edge cases we've got left then we were intending to push it up for comments...