Hello,

I had the same problem after upgrading from 2.0.5 to 2.0.6. I ignored
the mistake and rolled back. I thought the mistake was mine. I use the
self compiled versions only privately.

The logs, config and build-script are in the attachment. HAProxy runs on
a debian 9 VM

cheers
Michael


Am 14.09.19 um 13:08 schrieb GARDAIS Ionel:
> Hi,
> 
> I've just upgraded to 2.0.6 and all server checks went erratic.
> I had to disable checks for the servers to be reachable.
> 
> The observed behavior was a flip-flap (but mostly down) of server
> availability with L4TOUT when the server was considered unresponsive.
> 
> Ionel
> 
> 
> 

Attachment: build-haproxy.sh
Description: application/shellscript

Sep 16 21:06:13 mail haproxy[21253]: Proxy http started.
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_apache started.
Sep 16 21:06:13 mail haproxy[21253]: [NOTICE] 258/210613 (21253) : New worker #1 (21255) forked
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_gogs started.
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_prosody started.
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_smokeping started.
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_odroid started.
Sep 16 21:06:13 mail haproxy[21253]: Proxy bk_stats started.
Sep 16 21:00:33 mail haproxy[19453]: [WARNING] 258/210033 (19453) : Exiting Master process...
Sep 16 21:00:33 mail haproxy[19453]: [ALERT] 258/210033 (19453) : Current worker #1 (19454) exited with code 143 (Terminated)
Sep 16 21:00:33 mail haproxy[19453]: [WARNING] 258/210033 (19453) : All workers exited. Exiting... (0)
Sep 16 21:00:33 mail haproxy[20273]: Proxy http started.
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_apache started.
Sep 16 21:00:33 mail haproxy[20273]: [NOTICE] 258/210033 (20273) : New worker #1 (20274) forked
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_gogs started.
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_prosody started.
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_smokeping started.
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_odroid started.
Sep 16 21:00:33 mail haproxy[20273]: Proxy bk_stats started.
Sep 16 21:00:34 mail ansible-systemd: Invoked with no_block=False force=None name=haproxy daemon_reexec=False enabled=None daemon_reload=False state=reloaded masked=None scope=None user=None
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20273) : Reexecuting Master process
Sep 16 21:00:34 mail haproxy[20273]: Proxy http started.
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_apache started.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping frontend GLOBAL in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping frontend http in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_gogs started.
Sep 16 21:00:34 mail haproxy[20273]: [NOTICE] 258/210034 (20273) : New worker #1 (20303) forked
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_prosody started.
Sep 16 21:00:34 mail haproxy[20273]: [ALERT] 258/210034 (20274) : sendmsg()/writev() failed in logger #1: No such file or directory (errno=2)
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_apache in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_gogs in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_prosody in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_smokeping in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_odroid in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Stopping backend bk_stats in 0 ms.
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy GLOBAL stopped (FE: 1 conns, BE: 1 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy http stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_apache stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_gogs stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_prosody stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_smokeping stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_odroid stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20274) : Proxy bk_stats stopped (FE: 0 conns, BE: 0 conns).
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_smokeping started.
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_odroid started.
Sep 16 21:00:34 mail haproxy[20273]: Proxy bk_stats started.
Sep 16 21:00:34 mail haproxy[20273]: libgcc_s.so.1 must be installed for pthread_cancel to work
Sep 16 21:00:34 mail haproxy[20273]: [WARNING] 258/210034 (20273) : Former worker #1 (20274) exited with code 134 (Aborted)
Sep 16 21:00:38 mail haproxy[20273]: [WARNING] 258/210038 (20303) : Server bk_smokeping/odroid-docker is DOWN, reason: Layer4 timeout, check duration: 2001ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
Sep 16 21:00:38 mail haproxy[20273]: [ALERT] 258/210038 (20303) : sendmsg()/writev() failed in logger #1: No such file or directory (errno=2)
Sep 16 21:00:38 mail haproxy[20273]: [ALERT] 258/210038 (20303) : backend 'bk_smokeping' has no server available!
Sep 16 21:00:38 mail haproxy[20273]: [WARNING] 258/210038 (20303) : Server bk_odroid/odroid is DOWN, reason: Layer4 timeout, check duration: 2001ms. 0 active and 0 backup servers left. 0 sessions active, 0 requeued, 0 remaining in queue.
Sep 16 21:00:38 mail haproxy[20273]: [ALERT] 258/210038 (20303) : backend 'bk_odroid' has no server available!
global
    # log /dev/log    local0
    log /dev/log    local1 notice
    chroot /var/lib/haproxy
    stats socket /run/haproxy_admin.sock mode 660 level admin expose-fd 
listeners
    stats timeout 30s 
    user haproxy
    group haproxy
    daemon

    # Default SSL material locations
    ca-base /etc/ssl/certs
    crt-base /etc/ssl/private

    ssl-default-bind-ciphers ECDH+AESGCM:ECDH+CHACHA20
    ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets

    ssl-default-server-ciphers AES128+ECDHE:AES256+ECDHE
    ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets 


defaults
    log     global
    mode    http

    option  httplog
    option  dontlognull

    option  tcp-smart-connect
    option  tcp-smart-accept

    # use kernel splice system call to lower latency
    option  splice-auto

    option  forwardfor
    option  socket-stats

#    no option http-use-htx

    timeout http-request 20s 
    timeout connect       5s
    timeout client       50s
    timeout server       50s

    timeout check 800

    errorfile 400 /etc/haproxy/errorfiles/400.http
    errorfile 403 /etc/haproxy/errorfiles/403.http
    errorfile 408 /etc/haproxy/errorfiles/408.http
    errorfile 500 /etc/haproxy/errorfiles/500.http
    errorfile 502 /etc/haproxy/errorfiles/502.http
    errorfile 503 /etc/haproxy/errorfiles/503.http
    errorfile 504 /etc/haproxy/errorfiles/504.http


frontend http
    bind *:80  name http
    bind *:443 name https ssl crt /etc/haproxy/certs/default.pem crt 
/etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1

    compression algo gzip
    compression type text/html text/plain text/javascript 
application/javascript application/xml text/css

    # HSTS (31536000 seconds = 1 year)
    http-response set-header Strict-Transport-Security       max-age=31536000
    http-response set-header X-Content-Type-Options          nosniff

    # set protocoll headers to  https - works only if all https redirects 
happens in HAProxy
    http-request set-header  HTTP_X_FORWARDED_PROTO         https
    http-request set-header  X-Forwarded-Proto              https


    # force https for known domains
    acl hostname_has_backend 
hdr(Host),lower,map(/etc/haproxy/hostname2backend.map) -m found
    http-request redirect scheme https code 301                                
if !{ ssl_fc } hostname_has_backend

    # Let's encrypt
    acl letsencrypt-acl path_beg /.well-known/acme-challenge/
    http-request set-header Host certbot                                       
if letsencrypt-acl
    use_backend bk_apache                                                      
if letsencrypt-acl

    # stats backend
    acl stats-acl  path_beg /haproxy
    use_backend bk_stats                                                       
if stats-acl

    # routing for known domains
    use_backend bk_%[hdr(Host),lower,map(/etc/haproxy/hostname2backend.map)]   
if hostname_has_backend


backend bk_apache

        server apache 127.0.0.1:8080 check


backend bk_gogs

        server gogs-web-1 127.0.0.1:3000 check


backend bk_prosody

        server prosody 127.0.0.1:5281 check ssl verify none


backend bk_smokeping

        server odroid-docker 172.30.30.2:1080 check


backend bk_odroid

        server odroid 172.30.30.2:80 check


backend bk_stats
    # statistics backend
    stats uri /
    stats enable
    stats show-node
    stats refresh 30s

Reply via email to