Lukas, Thank you for responding. Here is the output as requested
---------------------------------------- [root@lb-staging haproxy]# /opt/haproxy/embedded/sbin/haproxy -vv HA-Proxy version 1.5.11 2015/01/31 Copyright 2000-2015 Willy Tarreau <[email protected]> Build options : TARGET = linux26 CPU = generic CC = gcc CFLAGS = -m64 -march=x86-64 -O2 -g -fno-strict-aliasing OPTIONS = USE_ZLIB=1 USE_OPENSSL=1 USE_STATIC_PCRE=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200 Encrypted password support via crypt(3): yes Built with zlib version : 1.2.6 Compression algorithms supported : identity, deflate, gzip Built with OpenSSL version : OpenSSL 1.0.2a 19 Mar 2015 Running on OpenSSL version : OpenSSL 1.0.2a 19 Mar 2015 OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports prefer-server-ciphers : yes Built with PCRE version : 8.31 2012-07-06 PCRE library supports JIT : no (USE_PCRE_JIT not set) Built with transparent proxy support using: IP_TRANSPARENT IP_FREEBIND Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. [root@lb-staging haproxy]# ---------------------------------------- also here is the output for one of the production instances which I’ve been forced to roll back to 1.5.4 ---------------------------------------- [root@lb1a log]# /opt/haproxy/embedded/sbin/haproxy -vv HA-Proxy version 1.5.4 2014/09/02 Copyright 2000-2014 Willy Tarreau <[email protected]> Build options : TARGET = linux26 CPU = generic CC = gcc CFLAGS = -m64 -march=x86-64 -O2 -g -fno-strict-aliasing OPTIONS = USE_ZLIB=1 USE_OPENSSL=1 USE_STATIC_PCRE=1 Default settings : maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200 Encrypted password support via crypt(3): yes Built with zlib version : 1.2.6 Compression algorithms supported : identity, deflate, gzip Built with OpenSSL version : OpenSSL 1.0.1i 6 Aug 2014 Running on OpenSSL version : OpenSSL 1.0.1i 6 Aug 2014 OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports prefer-server-ciphers : yes Built with PCRE version : 8.31 2012-07-06 PCRE library supports JIT : no (USE_PCRE_JIT not set) Built with transparent proxy support using: IP_TRANSPARENT IP_FREEBIND Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use epoll. ———————————————————— -John -- John Dyer Sent with Airmail On April 2, 2015 at 11:45:20 AM, Lukas Tribus ([email protected]) wrote: > Hello, > > I recently upgraded from HAProxy 1.5.4 to HAProxy 1.5.11, which > included an upgrade from OpenSSL 1.0.1i to 1.0.2a, and my load > balancers have since been crashing 1-2 times a day. > [...] > Any idea whats going on ? I have had to roll back to 1.5.4 in the meantime. Please provide the output of "haproxy -vv" of the 1.5.11 executable. I guess you have an ABI problem between openssl 1.0.1 and 1.0.2. Lukas
