Hi Paul,
> Hi > > I have haproxy 1.5-dev22 working with SSL termination and it seems to > be using quite a bit of CPU under a not very high load of SSL > connections. > > ios_sproxy_fe session rate max 50 sessions max 805 > > this lb also balances unencrypted traffic > ios_proxy_fe session rate max 720 sessions max 12.8K > > Before I enabled SSL termination haproxy used very little CPU to > balance the unencrypted traffic and pass the SSL traffic to the > backends via tcp. > > > When I add nbproc 2 it splits the load evenly between 2 cores as > expected but that creates difficulties in management via the management > socket and stats interface. > > I found this thread http://comments.gmane.org/gmane.comp.web.haproxy/9328 > which discusses offloading the SSL to 2 processes and passing the > unencrypted traffic to other port listeners via send-proxy. > > Is this still the recommended way to balance multiple cores with SSL > and nbproc? Yes, there is no way around nbproc> 1 if you have some SSL load. Also see this recent thread: http://thread.gmane.org/gmane.comp.web.haproxy/15790/focus=15817 Make sure keep-alive is working properly. Regards, Lukas
