HI Team, I have problem with respect to the HaProxy timeouts. I have an application which runs behind the HaProxy (Version 1.8) The application which I have can be considered as a Blackbox in which, the internals are unknown. In this application there is a RESTFul endpoint which takes considerable time to complete (less than 5 min) and returns an empty response (204). When I execute above endpoint (which goes through the HAProxy) it returns 502 Bad Gateway response and I can see following log message in HAProxy logs.
RESTFul Endpoint: GET /abc/service/com.team.repository.internal.diagnostic Log output-> Jul 14 05:55:01 localhost haproxy[116403]: 9.XX.XXX.219:38442 [14/Jul/2021:05:54:00.789] oift~ abc-default/defaultserver 0/0/143/-1/60217 502 204 - - SH-- 36/36/0/0/0 0/0 "GET /abc/service/com.team.repository.internal.diagnostic?id=com.team.repository.service.database.databaseStatisticsDiagnostic HTTP/1.1" However, when I remove HAProxy from the topolgy and invoke the same RESTFul endpoint, I can get the response (empty) correctly. Note: I can see the 'SH' response code in the above log. According to https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#8.5, I can see that HAProxy was waiting for proper headers from my application server. Is there anyway which we can overcome this issue ? My HAProxy configurtions are as follows, global log 127.0.0.1:514 local0 info chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 6000 user haproxy group haproxy daemon stats socket /var/lib/haproxy/stats tune.ssl.default-dh-param 2048 tune.maxrewrite 4096 defaults mode http log global option httplog option dontlognull option http-server-close option redispatch retries 3 timeout http-request 10m timeout queue 10m timeout connect 1m timeout client 10m timeout server 10m timeout tunnel 10m timeout http-keep-alive 10m maxconn 6000 frontend openshift bind *:80 bind *:443 ssl crt /etc/ssl/private/hap.pem mode http redirect scheme https if !{ ssl_fc } maxconn 2000 default_backend abc-default backend abc-default fullconn 1000 balance roundrobin server defaultserver abc-haproxy.apps.sstream-dev-new.os.com ssl verify none Thanks you in advance! Buddhi D. S. DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
