RE: Proxy protocol patch for nginx 1.4.x

[Lukas Tribus]

Hi Jim,


 Please try it and report any issue / bug / success story.
 (the wiki hosting the page above uses the patch, of course)


 This is great, and mostly working for me on 1.4.5! Solves a big problem
 of mine.However, is it not possible to use SNI at the same time?

 When I configure nginx like so:
 server {
 listen 127.0.0.1:443 ssl;
 server_name *.one.com;
 ...
 }
 server {
 listen 127.0.0.1:443 ssl;
 server_name *.two.com;
 ...
 }

 SNI works as expected. If I add accept_proxy_protocol=on to both listen
 directives, nginx fails like so:

 Starting nginx: nginx: [emerg] duplicate listen options for 127.0.0.1:443
 in /etc/nginx/sites-enabled/_.one.com:9

You can only specify listen options once per address:port tuple, all other
listen directives will inherit those options.

Thats because you cannot enable or disable some specific options or settings
like proxy_protocol, backlog or fastopen on the same port in a specific
server, you can only configure it per address:port pair (like you cannot
configure both http and https on the same port).

So just configure it in the first server and it will be inherited on all
servers using the same address:port tuple.

Also read [1].


So this shouldn't be related to the patch.



 Thanks a lot for the feedback.
 I know nginx devs are now working on an official patch:
 https://twitter.com/mdounin/status/441705983581372417

 Baptiste

Nice!



Regards,

Lukas


[1] http://nginx.org/en/docs/http/ngx_http_core_module.html#listen  
  

Re: Haproxy Load-Balance Scaling

[Xie Qingshan]

Godbach, 
Thanks for your quick reply and suggestions.
To enable multi-process mode can scale on a single node but limited by
the bandwidth of the host Network Interface.  Could HAProxy be scaled
horizontally, or HAProxy scale to multi-nodes instead of multi-process?

Q.Xie  

在 13-12-6 上午1:24， Godbach nylzhao...@gmail.com 写入:

On 2013/12/6 14:00, Qingshan Xie wrote:
 Hello Experts,
 not sure if this subject was already discussed or not, like to hear the
 advices and suggestions.
 If a single HAProxy instance as a load-balancer could not handle the
 high-load traffic, how to scale multiple instances as a group of
 load-balancers to handle the high-load?

 Thanks, Q.Xie
Hi,

You can enable multi-process mode for HAProxy by setting nbproc. The
description of nbproc is as below:

nbproc number
Creates number processes when going daemon. This requires the daemon
mode. By default, only one process is created, which is the recommended
mode of operation. For systems limited to small sets of file descriptors
per process, it may be needed to fork multiple daemons. USING MULTIPLE
PROCESSES IS HARDER TO DEBUG AND IS REALLY DISCOURAGED. See also daemon.

-- 
Best Regards,
Godbach

HAPROXY Load-Balance Scaling

[Xie Qingshan]

Not sure if the subject was already discussed, I'd like to hear the
advices/suggestions from experts.

If a single HAProxy as load-balancer could not handle the high-load
traffic due to limited bandwidth or capacity, how to scale multiple
HAProxy instances to serve the load-balance?

Thanks, Q.Xie

about HAProxy 1.5

[Xie Qingshan]

Hello Willy, 

Is there a timeline of v1.5 stable version release?
Is it CPU load high if v1.5 enables SSL termination?

Thanks, Q.Xie

subscribe

[Xie Qingshan]