LPO Master Class led by Deepak Malhotra, Chief Legal Administrative Officer and Global Counsel at Fusion Universal

2012-05-02 Thread Mitchell Jones
Dear Reader, We at Global Outsourcing Association of Lawyers invite you to participate in our very powerful LPO Master Class led by Deepak Malhotra, Chief Legal Officer Global Counsel at Fusion Universal, UK. Date: 25 April 2012 Time: 9:00 am PDT/12:00 pm EDT (100-120 minutes) Topic: LPO

haproxy ssh transparent proxy

2012-05-02 Thread jinge
Sorry for i'm new in haproxy,there is my problem i wanna haproxy to proxy any non-http traffic. And there is my config about it listen tcp-in bind 192.168.137.18: mode tcp tcp-request inspect-delay 5s tcp-request content accept if HTTP

Missing log entries

2012-05-02 Thread Peter Gillard-Moss
Hello, I am observing some strange behaviour with haproxy and logging on Ubuntu Oneiric. haproxy is setup to log to /dev/log and logs successfully appear in /var/log/syslog (via rsyslog). Well, some of them do. Some just don't. If I look on the servers we are proxying/load balancing I can

Re: Performance optimization on VMWare VM's

2012-05-02 Thread Sebastian Fohler
Hi, How important is it to assign a specific NIC to the single haproxy vm with physical passthrough? Best regards Sebastian On 16.04.2012 07:01, Baptiste wrote: Hey, You have to reserve resources for the VM. FYI, At exceliance, we were able to go up to 55K rps in a VM on a core i7. You'll

HAProxy Hardware LB

2012-05-02 Thread Sebastian Fohler
Hi, I'm trying to build a small size loadbalancing maschine which fit's into a small 19 rackmountable case. Are there any experiences which some specific hardware, for example ATOM boards or something similiar? Can someone recomment anything special? Best regards Sebastian

HAProxy high SLAB_CACHE

2012-05-02 Thread गौरव जोशी
Hi Team, Configured HAProxy for bunch of web servers. It was working smoothly until one fine day I found that on the server where haproxy is running memory utilisation is getting high everyday. Biggest chunk in the memory consumption is in slab_cache which is utilising 90% to 95% of total memory.

Re: nginx alone performs x2 than haproxy-nginx

2012-05-02 Thread Jinn Ko
On 29/04/2012 20:01, Willy Tarreau wrote: What I could suggest would be : - reduce /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_time_wait to 30s - increase /proc/sys/net/netfilter/nf_conntrack_max to 524288 conns. - increase hashsize to 131072 buckets. This will help you support

Re: nginx alone performs x2 than haproxy-nginx

2012-05-02 Thread Willy Tarreau
On Wed, May 02, 2012 at 03:40:58PM +0200, Lukas Tribus wrote: Note however that you will no longer be able to carry out any  connection tracking logic on matched packes, including no NAT,  syncookie protection, etc.  Are you sure syncookie protection doesn't work with -j NOTRACK? I

Re: HAProxy and SSL traffic termination

2012-05-02 Thread Baptiste
On Wed, May 2, 2012 at 3:46 PM, Alexander Kamardash alexander.kamard...@trusteer.com wrote: Hi, We want to perform LB, SSL termination and L7 on HAProxy. Could you please advise the best approach for it? We are interested in max performance and not complicated configuration. If you are

Re: Performance optimization on VMWare VM's

2012-05-02 Thread Baptiste
Hey, If you really need to do that for performance purpose, then you should dedicate a server to your LB... cheers On Wed, May 2, 2012 at 12:58 PM, Sebastian Fohler i...@far-galaxy.de wrote: Hi, How important is it to assign a specific NIC to the single haproxy vm with physical passthrough?

Re: Missing log entries

2012-05-02 Thread Baptiste
Hi, You should enable http-server-close option in both frontend and backend or in defaults section. Otherwise, the first request is the only logged (tunnel mode). cheers On Wed, May 2, 2012 at 12:53 PM, Peter Gillard-Moss pgill...@thoughtworks.com wrote: Hello, I am observing some strange

Re: Rate limiting based on backend response

2012-05-02 Thread Baptiste
Hi, Currently, you can only do this based on source IP address. I know Willy is working to improve this and in1.5-dev9 you'll be able to do it, since you'll be able to track any users using strings (ie your token) then apply conn_rate or sess_rate, http_req_rate, etc... using gpc0 as a trigger.

Re: Possible to healthy check backend server's link speed?

2012-05-02 Thread Baptiste
Hi, There s a timeout check you can try to play with, as well as the classical options like inter, rise and fall. cheers On Tue, May 1, 2012 at 5:13 PM, Igor j...@owind.com wrote: Hi, Sometimes, some backend servers' link quality become very poor ( test by wget a test file from server),

Re: HAProxy and SSL traffic termination

2012-05-02 Thread Vikram Adukia
A fairly easy configuration is to have Pound SSL sitting in front of HAProxy. I don't have benchmark numbers, but the configuration is fairly simple: Pound:443 - Haproxy:80 (or really any tcp port that haproxy is listening on) Here's most of my pound.cfg file: ListenHTTPS Address 0.0.0.0