Hi Iago, On Tue, Jan 24, 2023 at 04:45:54PM +0100, Iago Alonso wrote: > We are happy to report that after downgrading to OpenSSL 1.1.1s (from > 3.0.7), our performance problems are solved, and now looks like > HAProxy scales linearly with the available resources.
Excellent, thanks for this nice feedback! And welcome to the constantly growing list of users condemned to use 1.1.1 forever :-/ > For reference, in a synthetic load test with a request payload of 2k, > and a 32-core server (128GB RAM) with 10Gb bandwidth available, we are > able to sustain 1.83M conn, 82K rps, and a sslrate of 22k, with a load > average of about 31 (idle time percent was about 6) This looks like excellent numbers, which should hopefully give you plenty of headroom. Thanks for your feedback! Willy
