Re: Recommendations for a new haproxy installation

2015-04-30 Thread Willy Tarreau
Hi, On Wed, Apr 29, 2015 at 10:58:36PM -0600, Shawn Heisey wrote: On 4/29/2015 3:00 PM, Shawn Heisey wrote: How can I be sure that openssl is compiled with support for TLS acceleration in the CPU? I am compiling haproxy from source. Would you recommend that I install a separate and newer

Re: Recommendations for a new haproxy installation

2015-04-30 Thread Willy Tarreau
On Wed, Apr 29, 2015 at 03:00:58PM -0600, Shawn Heisey wrote: I have an existing load balancer installation that I have been slowly migrating from IPVS to haproxy. It's CentOS 6, so many components are out of date, such as TLS support. Once that migration is done, I would like to entirely

Recommendations for a new haproxy installation

2015-04-29 Thread Shawn Heisey
I have an existing load balancer installation that I have been slowly migrating from IPVS to haproxy. It's CentOS 6, so many components are out of date, such as TLS support. Once that migration is done, I would like to entirely replace the hardware and load an ideal software environment for

Re: Recommendations for a new haproxy installation

2015-04-29 Thread Shawn Heisey
On 4/29/2015 3:00 PM, Shawn Heisey wrote: How can I be sure that openssl is compiled with support for TLS acceleration in the CPU? I am compiling haproxy from source. Would you recommend that I install a separate and newer openssl from source for explicit use with haproxy, and tweak its