> So think that somehow, 1.5 was creating or keeping a lot more open
> connections at a time, and depriving the kernel, or its own limits of
> available connections?
Not necessarly the kernel itself. Some stateful inspection firewall between
the proxy and the backend, this includes conntrack on those boxes itself, but
can also be a third party firewall.
> I guess what I should do - is try 1.5 during "quiet time", and compare
> the environment (open fds, etc) with 1.4, and see what is different...
Yes. And we would also need to know about the load when the performance
was bad. Like high CPU? In userspace or system or maybe interrupts?
Regards,
Lukas