> Sorry, that was a "can" that really meant "can't" :) I can't
reproduce it.
Aw well, I was surprised it was so easy :)
> Can you try to upgrade to 1.8.12 ? A number of bugs have been fixed since
I did try the upgrade to 1.8.12, got the same results (segfault)
although I wasn't able to confirm it did segfault in the TCP splicing.
> What kind hove load do you have when it segfaults ?
Far from enormous, maximum 10 requests per second, but as I said in
my first post, the amount of TCP retransmissions and resets is very
large due to the fact we're black-holing the traffic since we use
haproxy for our captive portal
I'd be happy to provide a pcap but for privacy reasons I can't
extract it from a production environment and I can't see to replicate it
in lab.
Thanks!
--
Julien Semaan
[email protected] :: +1 (866) 353-6153 *155 ::www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)
On 2018-07-24 01:20 PM, Olivier Houchard wrote:
Hi Julian,
On Tue, Jul 24, 2018 at 12:58:27PM -0400, Julien Semaan wrote:
Hi Olivier,
Glad you're able to replicate it because I can't get it to happen
consistently!
I'd be happy if you could share the details of how it could be replicated if
that's not too complex or hard to explain via email.
Sorry, that was a "can" that really meant "can't" :) I can't reproduce it.
Anyway, attached to this email, you'll find the haproxy configuration that
has gotten the issue.
Also, a lua script we do use and that is referenced in the configuration.
This is running on CentOS 7.5.1804 with kernel 3.10.0-862.6.3.el7.x86_64
It is running through systemd, unit file attached to this email as well.
Let me know if you need more infos, and I'll be glad to provide them or if
you have a pcap I can replay to generate this issue in our lab.
Best Regards,
Thanks a lot for the informations !
I'm now pretty sure it's not related to directly splicing, more likely some
memory corruption.
Can you try to upgrade to 1.8.12 ? A number of bugs have been fixed since
1.8.9.
What kind hove load do you have when it segfaults ?
Thanks !
Olivier
