Hi Philipp,
> has anyone achieved to load-balance a SAProuter behind a HAproxy? > > SAProuter is a little peace of Software, that takes the a TCP session on > Port 3299 and forwards it to the backend SAP-ERP Systems. It has one > frontend IP and one TCP Port. > > As far as I see it, it should be quite easy to put HAproxy before this > setup? I would say so aswell, yes. > I can login in the SAP-Gui and a connection is established: > > May 15 10:10:54 ha1 haproxy[2294]: 128.130.YY.61:50947 > [15/May/2014:10:10:54.680] router-zap router-12a 128.130.XXX.63:3299 > 1/30/86 3306 -- 0/0/0/0/0 0/0 > > and then the connection is dropped and I see an error in the GUI: > > May 15 10:12:04 ha1 haproxy[2294]: 128.130.YY.61:50948 > [15/May/2014:10:10:54.789] router-zap router-12a 128.130.XXX.63:3299 > 1/0/69959 19629 sD 0/0/0/0/0 0/0 sD means (from the docs [1]): The server did not send nor acknowledge any data for as long as the "timeout server" setting during the data phase. This is often caused by too short timeouts on L4 equipments before the server (firewalls, load-balancers, ...), as well as keep-alive sessions maintained between the client and the server expiring first on haproxy. Does the description ring any bell (firewall with short timeouts, etc)? Still, its strange, because "timeout server" is configured with 2 hours in your case. Can you: - post the output of ./haproxy -vv - do a "show errors" [2] on the admin socket after a failure - provide a tcpdump capture of the backend session (full packets with -s0, but mind proprietary and authentication data) Regards, Lukas [1] http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#8.5 [2] http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#9.2-show%20errors
