inject31(192.168.6.66) --haproxy(192.168.6.1)---webserver(192.168.6.252) global maxconn 1000000 user root group root pidfile /var/run/haproxy.pid daemon nbproc 1 tune.bufsize 16384 log /dev/log local3 crit stats socket /var/run/haproxy_stats_socket defaults option accept-invalid-http-response option accept-invalid-http-request mode http timeout client 60s timeout connect 60s timeout server 120s no option httpclose option clitcpka backlog 40960 option dontlognull no option abortonclose no option allbackups no option forceclose no option nolinger option redispatch frontend web #bind 0.0.0.0:8001 transparent bind 192.168.6.1:8001 transparent maxconn 1000000 use_backend www if TRUE backend www source 0.0.0.0 usesrc clientip server SERVER 192.168.6.252:8001 maxconn 200000 option http-server-close option http-pretend-keepalive -----------------------------------------------
inject output if bind on 192.168.6.1 # ./inject -T 1000 -G 192.168.6.252:8001/ -o 900 -u 100 hits ^hits hits/s ^h/s bytes kB/s last errs tout htime sdht ptime 3888 3888 3626 3626 567648 529 529 0 0 0.1 0.3 247.8 7222 3334 3611 3588 1054412 527 523 0 0 0.1 0.3 253.7 11106 3884 3702 3884 1621476 540 567 0 0 4.7 118.1 233.4 17827 6721 4456 6721 2602744 650 981 0 0 55.0 347.4 476.4 24703 6876 4940 6876 3606640 721 1003 0 0 14.0 2.3 194.3 28214 3511 4702 3511 4119246 686 512 0 0 14.0 2.4 203.8 28214 0 4030 0 4119246 588 0 0 0 0.0 0.0 0.0 28214 0 3526 0 4119246 514 0 0 0 0.0 0.0 0.0 28214 0 3134 0 4119246 457 0 0 0 0.0 0.0 0.0 28214 0 2821 0 4119246 411 0 0 0 0.0 0.0 0.0 28214 0 2564 0 4119246 374 0 0 0 0.0 0.0 0.0 28214 0 2350 0 4119246 343 0 0 0 0.0 0.0 0.0 28214 0 2170 0 4119246 316 0 0 0 0.0 0.0 0.0 28214 0 2015 0 4119246 294 0 0 0 0.0 0.0 0.0 28214 0 1880 0 4119246 274 0 0 0 0.0 0.0 0.0 hits ^hits hits/s ^h/s bytes kB/s last errs tout htime sdht ptime 28214 0 1763 0 4119246 257 0 0 0 0.0 0.0 0.0 ^C Fin. Clients : 100 Hits : 28214 + 0 abort閟 Octets : 4119246 Duree : 16378 ms Debit : 251 kB/s Reponse : 1722 hits/s Erreurs : 0 Timeouts: 0 Temps moyen de hit: 0.0 ms Temps moyen d'une page complete: 0.0 ms Date de demarrage: 1350580458 (18 Oct 2012 - 17:14:18) Date de fin: 1350580475 (18 Oct 2012 - 17:14:35) ------------------------------------------- inject output if haproxy bind on 0.0.0.0 is # ./inject -T 1000 -G 192.168.6.252:8001/ -o 900 -u 100 hits ^hits hits/s ^h/s bytes kB/s last errs tout htime sdht ptime 3440 3440 4190 4190 502240 611 611 0 0 0.0 0.3 215.3 7778 4338 3889 3676 1135588 567 536 0 0 0.1 0.3 236.8 11263 3485 3754 3485 1644398 548 508 0 0 0.1 0.3 256.0 18101 6838 4525 6838 2642746 660 998 0 0 56.7 355.0 486.1 24920 6819 4984 6819 3638320 727 995 0 0 14.1 2.3 187.9 31675 6755 5279 6755 4624550 770 986 0 0 14.3 2.3 202.2 38446 6771 5492 6771 5613116 801 988 0 0 14.3 2.3 209.3 45194 6748 5649 6748 6598324 824 985 0 0 14.3 2.3 475.0 51961 6767 5773 6767 7586306 842 987 0 0 14.3 2.3 256.0 ^C Fin. Clients : 100 Hits : 51961 + 0 abort閟 Octets : 7586306 Duree : 9090 ms Debit : 834 kB/s Reponse : 5716 hits/s Erreurs : 0 Timeouts: 0 Temps moyen de hit: 14.3 ms Temps moyen d'une page complete: 256.0 ms Date de demarrage: 1350581149 (18 Oct 2012 - 17:25:49) Date de fin: 1350581158 (18 Oct 2012 - 17:25:58) Ligne de commande : ./inject -T 1000 -G 192.168.6.252:8001/ -o 900 -u 100 2012/10/18 Willy Tarreau <[email protected]>: > On Wed, Oct 17, 2012 at 08:03:29PM +0200, Baptiste wrote: >> Hi, >> >> First, you should try without TPROXY mode. >> Then you should give a increase the value of the ip_local_port_range >> sysctl... and tune your sysctl in general. > > I suspect conntrack is enabled and gets fooled by conflicting entries > between the client and server sides reusing the same ports. It's hard > to say without the config but it looks like this anyway. > > Willy >
