On Fri, Nov 21, 2014 at 06:23:43PM +0100, Willy Tarreau wrote: > There were changes to the acl part but in theory this should not > impact performance, especially not like this. Are you sure you > compiled 1.5 the same way as you did for 1.4 ? Please run > "haproxy -vv" for both versions and output the result. It's possible > that you used libpcre for 1.4 and not for 1.5 for example. PCRE is > extremely fast in general and not using it could easily cause what > you're observing.
yes, both use PCRE, difference is drammatic - 1.4 uses 25-30% CPU with nbproc 1 and 1.5 maxes out all cores with nbproc 8. this pinpoints to this exact acl i've included - if i hash it out everything works as normal (same load as 1.4). $ haproxy -vv HA-Proxy version 1.4.25 2014/03/27 Copyright 2000-2014 Willy Tarreau <w...@1wt.eu> Build options : TARGET = linux26 CPU = generic CC = gcc CFLAGS = -O2 -g -fno-strict-aliasing OPTIONS = USE_REGPARM=1 USE_PCRE=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200 Encrypted password support via crypt(3): yes Available polling systems : sepoll : pref=400, test result OK epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 4 (4 usable), will use sepoll. $ haproxy -vv HA-Proxy version 1.5.8 2014/10/31 Copyright 2000-2014 Willy Tarreau <w...@1wt.eu> Build options : TARGET = linux26 CPU = generic CC = gcc CFLAGS = -O2 -g -fno-strict-aliasing OPTIONS = USE_ZLIB=1 USE_REGPARM=1 USE_OPENSSL=1 USE_PCRE=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200 Encrypted password support via crypt(3): yes Built with zlib version : 1.2.3 Compression algorithms supported : identity, deflate, gzip Built with OpenSSL version : OpenSSL 1.0.1j-fips 15 Oct 2014 Running on OpenSSL version : OpenSSL 1.0.1j-fips 15 Oct 2014 OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports prefer-server-ciphers : yes Built with PCRE version : 6.6 06-Feb-2006 PCRE library supports JIT : no (USE_PCRE_JIT not set) Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. -- konrad rzentarzewski -- System Administrator, Efigence S.A. Office: +48.223801313 Off-hours: +48.222961020 EFI42-RIPE <legal_blurb> Ten mail nie stanowi pisma i zamówienia handlowego wg. Kodeksu spółek handlowych (Dz.U. 2000 nr 94 poz. 1037) Spółka wpisana do rejestru przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy Wydział XIII Gospodarczy Krajowego Rejestru sądowego pod numerem KRS 0000495808 NIP: 521-30-18-541 kapitał zakładowy: 103000 PLN </legal_blurb>