Hi Olivier, On Thu, May 04, 2023 at 03:09:43PM +0200, Olivier D wrote: > Hello, > > I've finally updated our load balancer, using HAProxy 2.0, to HAProxy 2.4 > \o/
Great! > I was motivated by both the EOL on 2.0, and by a recurring segfault > everytime we reloaded. btw, that segfault is now gone with 2.4 :) That's a bug and it shouldn't be like this. > I did not update to a newer version because we are still heavy users of > "nbproc" that we still need to convert to thread usage (and replace > bind-process by 'process'). I thought we killed nbproc much earlier than this! Time flies! > For those interested, the (small) necessary config changes were : > - option httpchk syntax (use http-check) > - some healthchecks not working anymore on servers with > "send-proxy-v2-ssl-cn ssl-check", due to an unresolved bug in Apache 2.4 ( > https://bz.apache.org/bugzilla/show_bug.cgi?id=63893). But why were they working previously ? Maybe they were sent as dummy PROXY commands ? If so maybe we could implement a workaround for such broken implementations if that's a big problem (not sure if this is feasible, just trying to figure what the desired behavior should be). > Everything seems to run smoothly, but on the monitoring, the number of > active sessions (scur) dropped significantly (only one third active > sessions compared to before), even after several hours. I did not make any > change on keep alive or timeouts, that's why I'm wondering if any > modifications between 2.0 and 2.4 may explain this behaviour. If you were running without HTX mode it's very likely because in the past it was indicating the number of established sessions while now it's reporting the number of active requests (since technically it's always a stream that is being accounted for, but in the past they used to remain present while in idle state, using all the resources between two requests). Cheers, Willy
