Hello all! We have HAProxy up and running now, and I have a few questions I'm wondering someone can help me with. To start, we are running HAProxy 1.5.1 (will be updating soon to 1.5.3), and it is on CentOS6.5
What is a safe limit to have maxconn set to? We have 10Gbig NICs, currently hitting a max of ~60k connections, and about 1.27Gb/s of throughput. Is there an upper limit I should avoid setting maxconn to? These servers are intended to be workhorses, and are pretty much only running HAProxy, and a few helper services, so I'm not too worried about HAProxy consuming all the resources on the machines. Second question: When we reload HAProxy, the older process never seems to go away. Looking at lsof output, it gives the following: [root@p3nlwpproxy001 ~]# lsof -p 26853 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME haproxy 26853 nobody cwd DIR 253,0 4096 662171 /usr/share/haproxy haproxy 26853 nobody rtd DIR 253,0 4096 662171 /usr/share/haproxy haproxy 26853 nobody txt REG 253,0 724368 396188 /usr/sbin/haproxy haproxy 26853 nobody mem REG 253,0 156928 2490761 /lib64/ld-2.12.so haproxy 26853 nobody mem REG 253,0 1926800 2490762 /lib64/libc-2.12.so haproxy 26853 nobody mem REG 253,0 22536 2490588 /lib64/libdl-2.12.so haproxy 26853 nobody mem REG 253,0 145896 2490763 /lib64/libpthread-2.12.so haproxy 26853 nobody mem REG 253,0 91096 2490771 /lib64/libz.so.1.2.3 haproxy 26853 nobody mem REG 253,0 9656 397429 /usr/lib64/libpcreposix.so.0.0.0 haproxy 26853 nobody mem REG 253,0 124624 2490772 /lib64/libselinux.so.1 haproxy 26853 nobody mem REG 253,0 113952 2490587 /lib64/libresolv-2.12.so haproxy 26853 nobody mem REG 253,0 1953536 397603 /usr/lib64/libcrypto.so.1.0.1e haproxy 26853 nobody mem REG 253,0 43392 2490776 /lib64/libcrypt-2.12.so haproxy 26853 nobody mem REG 253,0 472064 2490775 /lib64/libfreebl3.so haproxy 26853 nobody mem REG 253,0 17256 2490786 /lib64/libcom_err.so.2.1 haproxy 26853 nobody mem REG 253,0 46368 2490784 /lib64/libkrb5support.so.0.1 haproxy 26853 nobody mem REG 253,0 177520 2490785 /lib64/libk5crypto.so.3.1 haproxy 26853 nobody mem REG 253,0 944712 2490788 /lib64/libkrb5.so.3.3 haproxy 26853 nobody mem REG 253,0 12592 2490410 /lib64/libkeyutils.so.1.3 haproxy 26853 nobody mem REG 253,0 280520 2490789 /lib64/libgssapi_krb5.so.2.2 haproxy 26853 nobody mem REG 253,0 183816 2490701 /lib64/libpcre.so.0.0.1 haproxy 26853 nobody mem REG 253,0 444040 395978 /usr/lib64/libssl.so.1.0.1e haproxy 26853 nobody 0u REG 0,9 0 3840 anon_inode haproxy 26853 nobody 5u unix 0xffff88081cb61680 0t0 1151268926 socket haproxy 26853 nobody 3072u sock 0,6 0t0 2119378753 can't identify protocol haproxy 26853 nobody 5538u sock 0,6 0t0 2796993928 can't identify protocol haproxy 26853 nobody *651u sock 0,6 0t0 2881376906 can't identify protocol haproxy 26853 nobody *250u sock 0,6 0t0 1594166923 can't identify protocol haproxy 26853 nobody *096u sock 0,6 0t0 133637843 can't identify protocol haproxy 26853 nobody *791u sock 0,6 0t0 2132297198 can't identify protocol haproxy 26853 nobody *245u sock 0,6 0t0 4127967966 can't identify protocol haproxy 26853 nobody *567u sock 0,6 0t0 2957000232 can't identify protocol haproxy 26853 nobody *763u sock 0,6 0t0 215548265 can't identify protocol haproxy 26853 nobody *505u sock 0,6 0t0 1894363619 can't identify protocol haproxy 26853 nobody *513u sock 0,6 0t0 1763061211 can't identify protocol haproxy 26853 nobody *377u sock 0,6 0t0 3158442296 can't identify protocol Wondering if anyone has seen this, or knows what we can do for the seemingly hung connections. They seem to be what is keeping the old process around. Thanks! Dan Dubovik
