Hi All

Hoping someone will be able to help, we're running a bit of an interesting
setup

we have 3 HAProxy nodes running freebsd 11.0 , each host runs 4 jails, each
running haproxy, but only one of the jails is under any real load

we use CARP to balance between the hosts and jails which seems to be
working fine

about 1 once every 2/3 months, all the haproxy instances hang, the process
keeps running, but doesn't access any more connections, the monitoring
socket is unresponsive. it doesn't produce any errors in logs.

these hangs all happen within a couple of seconds, over all jails on all
hosts taking down our frontend network, a restart of the haproxy service
fixes it.

we use chef for config management, and all the run times are splayed, all
the haproxy instances will have different up times

Any one who has an good idea of what could cause this?

Thanks!!



haproxy -vv

HA-Proxy version 1.7.2 2017/01/13

Copyright 2000-2017 Willy Tarreau <[email protected]>


Build options :

  TARGET  = freebsd

  CPU     = generic

  CC      = cc

  CFLAGS  = -O2 -pipe -fstack-protector -fno-strict-aliasing -DFREEBSD_PORTS

  OPTIONS = USE_GETADDRINFO=1 USE_ZLIB=1 USE_CPU_AFFINITY=1 USE_OPENSSL=1
USE_LUA=1 USE_STATIC_PCRE=1 USE_PCRE_JIT=1


Default settings :

  maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200


Encrypted password support via crypt(3): yes

Built with zlib version : 1.2.8

Running on zlib version : 1.2.8

Compression algorithms supported : identity("identity"),
deflate("deflate"), raw-deflate("deflate"), gzip("gzip")

Built with OpenSSL version : OpenSSL 1.0.2k-freebsd  26 Jan 2017

Running on OpenSSL version : OpenSSL 1.0.2j-freebsd  26 Sep 2016

OpenSSL library supports TLS extensions : yes

OpenSSL library supports SNI : yes

OpenSSL library supports prefer-server-ciphers : yes

Built with PCRE version : 8.40 2017-01-11

Running on PCRE version : 8.40 2017-01-11

PCRE library supports JIT : yes

Built with Lua version : Lua 5.3.3

Built with transparent proxy support using: IP_BINDANY IPV6_BINDANY


Available polling systems :

     kqueue : pref=300,  test result OK

       poll : pref=200,  test result OK

     select : pref=150,  test result OK

Total: 3 (3 usable), will use kqueue.


Available filters :

[SPOE] spoe

[TRACE] trace

[COMP] compression

Reply via email to