On Thu, May 22, 2014 at 09:33:06AM +0200, Baptiste wrote: > It also depends on your L7 configuration. > option http-close of force-close will consume more resources than > keep-alive or server-close. > Also, how have you configured your HAProxy from a process point of view, I > mean: > - how many processes > - how many processes dedicated to SSL processing > - have you enable 'tune.ssl.cachesize' (or have you tunned it or tried > to increase its value?)
good point, as it defaults to 20000 entries, so with 76k concurrent conns half of which are SSL, we can still expect that the cache is renewed a lot! > etc... > > Can you run a 'show info' on your HAProxy socket and paste here the > SSL related lines? > > Note to Willy and Emeric: the 'show info' don't report the number of > sessions stored in the cache. It may be interesting to get it, if > possible. Noted :-) Willy
