On Sun, Mar 20, 2011 at 11:12:48AM -0400, Allan Wind wrote: > On 2011-03-20 10:25:07, Baptiste wrote: > > Yes, Haproxy can limit rate connection. > > Please look for "rate-limit sessions" and "fe_sess_rate" in the > > configuration.txt documentation [1]. > > rate-limit and fe_sess_rate are for global for all IPs, right?
Yes. They're more designed for service protection. > > In HAproxy 1.5 [2], there are a few more options, like src_conn_XXXX > > which are more accurate and might help you better. > > Bear in mind that 1.5 is still in development. > > src_conn_rate looks interesting. I apologize for not being very > familiar with haproxy's release schedule but any hints on when > 1.5 becomes stable? It should have already been released, but the amount of work for the server-side keep-alive was under-estimated and got things delayed a lot. I'd hope that we could release it in a few months though. Some sites are already running 1.5-dev, but that requires a lot more care than using a stable version, so unless you're able to regularly follow updates and troubleshoot potential issues, it's not recommended to do so. Regards, Willy

