Hi Janusz,
> Hello, > it seems I've stumbled upon a regression in haproxy 1.5.16. > > Short story: After upgrading 1.5.15 to 1.5.16 CPU usage increased > significantly (3-4 times) > > Long story: > > I have several haproxy servers running happily with 1.5.15 for quite > some time. Recently I've started upgrading them to 1.5.16. > Unfortunately, as soon as I start 1.5.16 the CPU usage increases 3-4 > times. Some haproxy processes eat 100% CPU (I run with nbproc=4). > Apart from that... everything works just fine and I've not noticed any > problems. > I also have a standby server. I've tried simulating some traffic but I > was unable to reproduce the problem there. As soon as I direct > production traffic to the standby server it shows the same behavior > (increased CPU as compared to 1.5.15). Ok, so its directly related to the production load. I assume downgrading to 1.5.15 normalizes the CPU load again? Some quick tests: - try without epoll (noepoll in the global section) - does TLS resumption correctly work? Check with rfc5077-client: git clone https://github.com/vincentbernat/rfc5077.git cd rfc5077 make rfc5077-client ./rfc5077-client <server> > I have also Certificate Transparency patch applied, backported from > 1.6. Can you try without it? cheers, lukas
