HAProxy Response time performance

2011-06-09 Thread Matt Christiansen
Hello, I am wanting to move to HAProxy for my load balancing solution. Over all I have been greatly impressed with it. It has way more throughput and can handle way more connections then our current LB Solution (nginx). I have been noticing one issue in all of our tests though, it seems like in

Re: HAProxy Response time performance

2011-06-09 Thread Igor
Can't find 1.4.16 at http://haproxy.1wt.eu/download/1.4/src/ ? Bests, -Igor 2011/6/9 Hervé COMMOWICK hcommow...@exosec.fr: Hello Matt, You need to activate logging to see what occurs to your requests, you can use halog tool (in the contrib folder) to filter out fast requests. Other

Re: HAProxy Response time performance

2011-06-09 Thread Hervé COMMOWICK
As i say, it is not yet released, get the snapshot or wait a week. Hervé. On Thu, 9 Jun 2011 17:43:51 +0800 Igor j...@owind.com wrote: Can't find 1.4.16 at http://haproxy.1wt.eu/download/1.4/src/ ? Bests, -Igor 2011/6/9 Hervé COMMOWICK hcommow...@exosec.fr: Hello Matt, You

[no subject]

2011-06-09 Thread Mrs Elizabeth Kruger
Dearly Beloved, My name is Mrs. Elizabeth KrUger; I am a dying woman who has decided to donate what i have to you/charitable organisation. I am 69 years old and i was diagnosed with cancer immediately after the death of my husband 2 years ago, who has left me everything he worked for and

Re: Help on SSL termination and balance source

2011-06-09 Thread James Bardin
On Thu, Jun 9, 2011 at 7:33 AM, habeeb rahman pk.h...@gmail.com wrote: apache rewrite rule:  RewriteRule ^/(.*)$ http://127.0.0.1:2443%{REQUEST_URI} [P,QSA,L] Why are you using a rewrite instead of mod_proxy? ProxyPass does some nice things by default, like adding the X-Forwarded-For header

Re: Help on SSL termination and balance source

2011-06-09 Thread habeeb rahman
James, Thanks for your points. Rewrite rule was set up by some other guys and is being used for some time now and works well with round robin. Anyhow I will look at mod_proxy in detail. Not sure how SSL termination can be done with it and moreover how haproxy gonna balance based on client IP. Any

Connection tracking in tcp mode

2011-06-09 Thread Andreas
Hi, we are using haproxy only in tcp mode. Actually we have the problem that we see broken requests on our backend server, but we cannot see which client group is causing the problem. That's because we only see the IP and the source port of haproxy in our server logs and the client IP and

Re: Help on SSL termination and balance source

2011-06-09 Thread Holger Just
Habeeb, given your Apache does actually insert/append an X-Forwarded-For header you can use this statement instead of balance source in HAProxy: balance hdr(X-Forwarded-For) This has a few caveats you should be aware. Users can set the X-Forwarded-Header themselves (which is done by some

customizing 200 responses to monitor-uri

2011-06-09 Thread Matthew Bachmann
Haproxy lets me provide a static page that's returned when 503 and other error conditions are triggered. With monitor-uri though, I'm not able to customize the 200 response. What is the right way to request that feature? -Matt

Re: HAProxy Response time performance

2011-06-09 Thread Matt Christiansen
I turned on those two options and seemed to help a little. We don't have a 2.6.30+ kernel so I don't believe option splice-response will work(?). Thats one of the things I'm going to try next. I used halog to narrow down the sample, it was still a few 100 lines so I picked three at random. Jun

Would you like to give me suggestion about problem that I am trying to use haproxy as a web server when a client connect at first time

2011-06-09 Thread 陳崇葦
Hi, I am a rookie for operation of computer networks. I am trying to utilize haproxy to do load balance according to a client's location. I have found some tool to get the client location by the client himself. I hope the client can periodically send the information of his location to haproxy, and

Re: HAProxy Response time performance

2011-06-09 Thread Willy Tarreau
Hi Matt, On Thu, Jun 09, 2011 at 11:37:00AM -0700, Matt Christiansen wrote: I turned on those two options and seemed to help a little. We don't have a 2.6.30+ kernel so I don't believe option splice-response will work(?). Thats one of the things I'm going to try next. Splicing is OK since

transparent mode

2011-06-09 Thread Robert Lassiter
I am sure it's been asked before, I can find some vague references on how to accomplish this but nothing that does not include recompiling the kernel. I think these posts are out of date. So, sorry in advance but here's the question. I have about 1000 listen (groups) and need to pass the client

RE: transparent mode

2011-06-09 Thread Brian Carpio
If you need to pass the client IP you simply need to enable x-forwarded-for (option forwardfor). If you truly need transparent load balancing then depending on what Linux OS and version you are running you MIGHT very well need to recompile the kernel and iptables. For the one environment that

Re: Handling errors 502 Bad Gateway

2011-06-09 Thread Willy Tarreau
Hi Alexey, On Thu, Jun 09, 2011 at 01:32:06PM +0400, Alexey Vlasov wrote: Hi! Here, actually, I've found the description of the same problem. At Apache falling/restart, haproxy returns to users 502 error. http://www.formilux.org/archives/haproxy/0812/1575.html Here I give the example of

Re: transparent mode

2011-06-09 Thread Willy Tarreau
Hi Robert, On Thu, Jun 09, 2011 at 04:23:46PM -0400, Robert Lassiter wrote: I am sure it's been asked before, I can find some vague references on how to accomplish this but nothing that does not include recompiling the kernel. I think these posts are out of date. So, sorry in advance but

Re: Connection tracking in tcp mode

2011-06-09 Thread Willy Tarreau
Hi Andreas, On Thu, Jun 09, 2011 at 03:55:46PM +0200, Andreas wrote: Hi, we are using haproxy only in tcp mode. Actually we have the problem that we see broken requests on our backend server, but we cannot see which client group is causing the problem. That's because we only see the

Re: HAProxy Response time performance

2011-06-09 Thread Matt Christiansen
Hi Willy, I agree the haproxy logs show that, but we also monitor the time spent processing the request which takes in to account, GC, reading data off the FS and a number of things inside the app and I see no 3sec times in there or anything near it. Also I have no 3 sec outliers in output from

Re: HAProxy Response time performance

2011-06-09 Thread Willy Tarreau
Hi Matt, On Thu, Jun 09, 2011 at 01:50:11PM -0700, Matt Christiansen wrote: Hi Willy, I agree the haproxy logs show that, but we also monitor the time spent processing the request which takes in to account, GC, reading data off the FS and a number of things inside the app and I see no 3sec

Re: Health check

2011-06-09 Thread Willy Tarreau
Hi Guillaume, On Thu, Jun 09, 2011 at 05:10:09PM -0400, Guillaume Bourque wrote: Hi all, I have haproxy 1.4.10 running fine.q One or twice a day I have some healt check failed in my stat page where can I look to find when this health check has failed to try to find out what it cause it

Re: HAProxy Response time performance

2011-06-09 Thread Matt Christiansen
I added in the tun.bufsize 65536 and right away things got better, I doubled that to 131072 and all of the outliers went way. Set at that with my tests it looks like haproxy is faster then nginx on 95% of responses and on par with nginx for the last 5% which is fine with me =). What is the

Re: HAProxy Response time performance

2011-06-09 Thread Willy Tarreau
On Thu, Jun 09, 2011 at 04:04:26PM -0700, Matt Christiansen wrote: I added in the tun.bufsize 65536 and right away things got better, I doubled that to 131072 and all of the outliers went way. Set at that with my tests it looks like haproxy is faster then nginx on 95% of responses and on par