>
> Do you get better results if you'll use http instead of https ?

I already tested it yesterday and the results are pretty much the same
(only a very small improvement, which is expected, but not a substantial
change).

Running top / htop should show if userspace uses all cpu.


 During the test the CPU usage is this:


%Cpu0  :* 65.1 *us,*  5.0 *sy,*  0.0 *ni,* 29.9 *id,*  0.0 *wa,*  0.0 *hi,*
0.0 *si,*  0.0 *st

%Cpu1  :* 49.0 *us,*  6.3 *sy,*  0.0 *ni,* 30.3 *id,*  0.0 *wa,*  0.0 *hi,
* 14.3 *si,*  0.0 *st

%Cpu2  :* 67.7 *us,*  4.0 *sy,*  0.0 *ni,* 24.8 *id,*  0.0 *wa,*  0.0 *hi,*
3.6 *si,*  0.0 *st

%Cpu3  :* 72.1 *us,*  6.0 *sy,*  0.0 *ni,* 21.9 *id,*  0.0 *wa,*  0.0 *hi,*
0.0 *si,*  0.0 *st


Also note that when I increase the number of CPUs and HAProxy processes I
don't get any benefit on performance (and the CPU usage is much lower).


On Fri, May 11, 2018 at 5:45 PM, Jarno Huuskonen <[email protected]>
wrote:

> Hi,
>
> On Fri, May 11, Marco Colli wrote:
> > Hope that this is the right place to ask.
> >
> > We have a website that uses HAProxy as a load balancer and nginx in the
> > backend. The website is hosted on DigitalOcean (AMS2).
> >
> > The problem is that - no matter the configuration or the server size - we
> > cannot achieve a connection rate higher than 1,000 new connections / s.
> > Indeed we are testing using loader.io and these are the results:
> > - for a session rate of 1,000 clients per second we get exactly 1,000
> > responses per second
> > - for session rates higher than that, we get long response times (e.g.
> 3s)
> > and only some hundreds of responses per second (so there is a bottleneck)
> > https://ldr.io/2I5hry9
>
> Is your load tester using https connections or http (probably https,
> since you have redirect scheme https if !{ ssl_fc }) ? If https and each
> connection renegotiates tls then there's a chance you are testing how
> fast your VM can do tls negot.
>
> Running top / htop should show if userspace uses all cpu.
>
> Do you get better results if you'll use http instead of https ?
>
> -Jarno
>
> --
> Jarno Huuskonen
>

Reply via email to