Hello Lukas,
Since this is a production environment i had to find a window to run the
tasks...
1. Upgraded to 1.7.5
2. below is the output of haproxy -vv (before and after upgrade)
HA-Proxy version 1.7.3 2017/02/28
Copyright 2000-2017 Willy Tarreau <wi...@haproxy.org>
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement
OPTIONS = USE_ZLIB=1 USE_OPENSSL=1 USE_PCRE=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.8
Running on zlib version : 1.2.8
Compression algorithms supported : identity("identity"), deflate("deflate"),
raw-deflate("deflate"), gzip("gzip")
Built with OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016
Running on OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.38 2015-11-23
Running on PCRE version : 8.38 2015-11-23
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built without Lua support
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
Available filters :
[COMP] compression
[TRACE] trace
[SPOE] spoe
--------------------------------------------------------------------------------------
HA-Proxy version 1.7.5-2ppa1~xenial 2017/05/27
Copyright 2000-2017 Willy Tarreau <wi...@haproxy.org>
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -g -O2 -fPIE -fstack-protector-strong -Wformat
-Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2
OPTIONS = USE_GETADDRINFO=1 USE_ZLIB=1 USE_REGPARM=1 USE_OPENSSL=1 USE_LUA=1
USE_PCRE=1 USE_NS=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.8
Running on zlib version : 1.2.8
Compression algorithms supported : identity("identity"), deflate("deflate"),
raw-deflate("deflate"), gzip("gzip")
Built with OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016
Running on OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.38 2015-11-23
Running on PCRE version : 8.38 2015-11-23
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built with Lua version : Lua 5.3.1
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND
Built with network namespace support
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
Available filters :
[COMP] compression
[TRACE] trace
[SPOE] spoe
So far i don't see the haproxy process hangs on 100% utilization.
I returned the configuration to run on a single core (#1) and will update in
case the issue returns
Thanks
________________________________
From: Lukas Tribus <lu...@gmx.net>
Sent: Thursday, May 25, 2017 7:33 PM
To: Haim Ari; haproxy@formilux.org
Subject: Re: Haproxy first core 100%
Hello Haim,
Am 25.05.2017 um 09:23 schrieb Haim Ari:
>
> Hello,
>
>
> I'll try do describe the issue as clear as possible:
>
>
> We set up an haproxy Cluster on Ubuntu16.04 + pacemaker + corosync
>
> We faced an issue where after working for a few hours with single core
> (the haproxy process was bind to core #1 not #0 - which is handling
> the IRQ interrupts )
>
> it is 100% utilized.
>
>
> [...]
> Haproxy: HA-Proxy version 1.7.3 2017/02/28
> OS: Ubuntu 16.04.2 LTS
> Kernel: 4.4.0-66-generic
> Pacemaker: 1.1.14-2
> Corosync 2.3.5-3
>
> Any advise on this ?
First of all, please upgrade to latest stable, by adding Vincent PPA:
https://haproxy.debian.net/#?distribution=Ubuntu&release=xenial&version=1.7
If it still happens when running haproxy 1.7.5, please provide the
output of haproxy -vv and some details about the loop as it appears in
strace (let "strace -ttp<PID>" running for a few seconds - be careful
about your privacy when sharing the strace output).
Thanks,
Lukas
