Hi,

I have tested the Debian upgrade from jessie to strech on a test-box and now my config doens't work anymore with haproxy 1.7.5.


I also tested it an a jessie box with backported haproxy 1.7.5. I see the same error there.

My config for looks like this:

global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        user haproxy
        group haproxy
        daemon
stats socket /var/run/haproxy-admin.sock user root group root mode 0600 level admin
        stats socket /var/run/haproxy.sock user root group nagios mode 0660
        stats bind-process 1
        maxconn     40000

        tune.bufsize    24576
        tune.chksize    24576

ssl-default-bind-ciphers ECDHE+aRSA+AES256+GCM+SHA384:ECDHE+aRSA+AES128+GCM+SHA256:ECDHE+aRSA+AES256+SHA384:ECDHE+aRSA+AES128+SHA256:ECDHE+aRSA+AES256+SHA:ECDHE+aRSA+AES128+SHA:AES256+GCM+SHA384:AES128+GCM+SHA256:AES128+SHA256:AES256+SHA256:DHE+aRSA+AES128+SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4
        ssl-default-bind-options no-sslv3 no-tls-tickets
        tune.ssl.default-dh-param       2048


defaults
        log     global
        mode    http
        option  httplog
        option  dontlognull
        option  socket-stats
option redispatch # Try another server in case of connection failure option contstats # Enable continuous traffic statistics updates
        option  abortonclose

        timeout client 7200s                     #alctl: client inactivity
timeout server 7200s #alctl: server inactivity timeout timeout connect 5s # 5 seconds max to connect or to stay in queue timeout queue 30s # 30 seconds max queued on load balancer

peers testha-cluster
        peer testha1 128.130.xx.yy1:1024
        peer testha2 128.130.xx.yy2:1024

listen mail-exchtest-smtp
        bind 128.130.xx.yy6:25 transparent name smtp
        bind 128.130.xx.yy6:587 transparent name submission
        mode tcp
log-format %ci:%cp\ [%t]\ %ft\ %s\ %si:%sp\ %Tw/%Tc/%Tt\ %B\ %ts\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq
        balance roundrobin
        stick-table type ip size 20k peers testha-cluster
        stick on src
        maxconn 8765
        option tcp-check
        tcp-check connect port 25
        tcp-check expect string 220
        tcp-check connect port 587
        tcp-check expect string 220

        server  mbx13a 128.130.xx.zz1: maxconn 5000 check
        server  mbx13b 128.130.xx.zz2: maxconn 5000 check
        server  mbx13c 128.130.xx.zz3: maxconn 5000 check
        server  mbx13d 128.130.xx.zz4: maxconn 5000 check


This config works in 1.5.8 but fails to tcp-check in 1.7.5.

The errors in the logfile look like this:

Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13a is DOWN, reason: Socket error, info: "No port available for the TCP connection", check duration: 0ms. 3 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13b is DOWN, reason: Socket error, info: "No port available for the TCP connection", check duration: 0ms. 2 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13c is DOWN, reason: Socket error, info: "No port available for the TCP connection", check duration: 0ms. 1 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. Jun 19 10:52:57 testha2 haproxy[5042]: Server mail-exchtest-smtp/mbx13d is DOWN, reason: Socket error, info: "No port available for the TCP connection", check duration: 0ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue. Jun 19 10:52:57 testha2 haproxy[5042]: proxy mail-exchtest-smtp has no server available!


I haven't found any messages with this bug and how to fix it,

Thanks
Philipp


--
-----------------------------------------------------------------------
DI Mag. Philipp Kolmann                  mail: kolm...@zid.tuwien.ac.at
Technische Universitaet Wien                  web: www.zid.tuwien.ac.at
Zentraler Informatikdienst (ZID)                 tel: +43(1)58801-42011
Wiedner Hauptstr. 8-10, A-1040 Wien                        DVR: 0005886
-----------------------------------------------------------------------


Reply via email to