Re: Multiprocess Loadsharing

2013-12-09 Thread Annika Wickert
Hi, thank you for confirming. Best regards, Annika --- Systemadministration Travian Games GmbH Wilhelm-Wagenfeld-Str. 22 80807 München Germany Tel: +49 / (0)89 / 324 915 - 171 Fax: +49 / (0)89 / 324 915 - 970 a.wick...@traviangames.com www.traviangames.de Sitz der Gesellschaft München AG

splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Annika Wickert
Hi everybody, we have a few regarding load at our Haproxy 1.5-dev19 cluster. We run constantly at a load of 12 - 15 most of it is system load. I started to do debugging with strace and see constantly the following message: epoll_ctl(0, EPOLL_CTL_ADD, 1541, {EPOLLIN|0x2000, {u32=1541,

Bye, bye

2013-12-09 Thread
We are sorry that you decided to opt-out. We confirm that this email account haproxy@formilux.org has un-subscribed.

RE: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Lukas Tribus
Hi Annika, we have a few regarding load at our Haproxy 1.5-dev19 cluster. We run constantly at a load of 12 - 15 most of it is system load. [...] On our old cluster i do not see any of the Resource temporarily unavailable” at splicing operation.  We can't tell if that kind of load is

Re: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Mark Janssen
There are some bugs with splice in 1.5-dev19... they have been fixed. See this thread for the patches: http://comments.gmane.org/gmane.comp.web.haproxy/12774 (Or google for: Oh and by the way, the bug was present since 1.5-dev12. ) On Mon, Dec 9, 2013 at 2:56 PM, Lukas Tribus

Re: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Annika Wickert
Hi, I am sorry I forgot to attach the necessary files :x. On 09 Dec 2013, at 14:56, Lukas Tribus luky...@hotmail.com wrote: Hi Annika, we have a few regarding load at our Haproxy 1.5-dev19 cluster. We run constantly at a load of 12 - 15 most of it is system load. [...] On our old

Re: SSL client mode

2013-12-09 Thread Thomas Heil
Hi, On 08.12.2013 21:34, Igor wrote: Hi, it may like stunnel's client mode. In haproxy, we may get like this to terminate SSL server to HTTP server. listen http bind: 80 mode ssl-client use-server sslsrv 127.0.0.1:443 I think this should work -- listen http :80 mode http server

Re: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Annika Wickert
Hi, There are some bugs with splice in 1.5-dev19... they have been fixed. See this thread for the patches: http://comments.gmane.org/gmane.comp.web.haproxy/12774 (Or google for: Oh and by the way, the bug was present since 1.5-dev12. ) thank you for the hint. I will try this on

RE: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Lukas Tribus
Hi, There are some bugs with splice in 1.5-dev19... they have been fixed.   See this thread for the patches: http://comments.gmane.org/gmane.comp.web.haproxy/12774   (Or google for: Oh and by the way, the bug was present since 1.5-dev12. ) This is not what Annika is seeing; that bug is

Compile warning on OS X

2013-12-09 Thread Igor
include/common/time.h:111:29: warning: implicit conversion from 'unsigned long' to '__darwin_suseconds_t' (aka 'int') changes value from 18446744073709551615 to -1 [-Wconstant-conversion] tv-tv_sec = tv-tv_usec = TV_ETERNITY; ~ ^~~

Re: SSL client mode

2013-12-09 Thread Igor
Thanks Thomas and Lukas, that's what I look for. Bests, -Igor On Mon, Dec 9, 2013 at 10:17 PM, Thomas Heil h...@terminal-consulting.de wrote: Hi, On 08.12.2013 21:34, Igor wrote: Hi, it may like stunnel's client mode. In haproxy, we may get like this to terminate SSL server to HTTP

RE: SSL client mode

2013-12-09 Thread Lukas Tribus
Hi, listen http bind: 80 mode ssl-client use-server sslsrv 127.0.0.1:443 I think this should work -- listen http :80 mode http server sslsrv 127.0.0.1:443 ssl -- Yes exactly, or something like this when using the frontend/backend approach: frontend myfrontend  mode http  bind :80  

Re: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Annika Wickert
Hi, Hi There are some bugs with splice in 1.5-dev19... they have been fixed. See this thread for the patches: http://comments.gmane.org/gmane.comp.web.haproxy/12774 (Or google for: Oh and by the way, the bug was present since 1.5-dev12. ) This is not what Annika is seeing; that bug is about

RE: splice(0xedb, 0, 0xf09, 0, 0x72b0, 0x3) = -1 EAGAIN (Resource temporarily unavailable)

2013-12-09 Thread Lukas Tribus
Hi, For testing we disabled splicing on one of the cluster members on the new cluster (after succesfull tests). Now load drops below 8 from 16. So I maybe try it with splice-auto and if that does not help with a new haproxy build with the following git commits: Yes, but please fix the

Ваши глаза заново будут видеть превосходнейшее

2013-12-09 Thread imyataeeva_1956
http://goo.gl/e6FzJp работа на не вредит глазам

Rate limiting on specific endpoint

2013-12-09 Thread Athanasios | ZenGuard
Dear HAProxy community, First of all thank you for the wonderful work and the support contained within the archives of this emailing list. I am trying to protect a specific endpoint of my application (let's assume that it ends with /athanasios) and only that endpoint. The limits that I am trying

New bug?

2013-12-09 Thread Igor
Hi, after upgraded to haproxy-ss-20131207, haproxy failed to start due to the errors: [ALERT] 343/024837 (19081) : parsing [/etc/haproxy/conf.conf:15] : error detected while parsing a 'rspideny' condition : missing args for fetch method 'table_cnt' in sample expression 'table_cnt'. [ALERT]

Re: New bug?

2013-12-09 Thread Thomas Heil
Hi, On 09.12.2013 20:14, Igor wrote: Hi, after upgraded to haproxy-ss-20131207, haproxy failed to start due to the errors: [ALERT] 343/024837 (19081) : parsing [/etc/haproxy/conf.conf:15] : error detected while parsing a 'rspideny' condition : missing args for fetch method 'table_cnt' in

Re: Rate limiting on specific endpoint

2013-12-09 Thread Baptiste
On Mon, Dec 9, 2013 at 8:07 PM, Athanasios | ZenGuard athanas...@zenguard.org wrote: Dear HAProxy community, First of all thank you for the wonderful work and the support contained within the archives of this emailing list. I am trying to protect a specific endpoint of my application (let's

Re: dst host IP ACL support?

2013-12-09 Thread Baptiste
On Fri, Dec 6, 2013 at 7:03 PM, Igor j...@owind.com wrote: Hi, Is it possible to create ACL that based on destination host's IP in HTTP mode? For example, acl n1 dst_ip 1.1.1.1 use_backend b1 if n1 if request host: u2.abc.com has IP 1.1.1.1, it will use backend b1. Thanks. Bests,

Re: XForwardfor Varnish behind HaProxy

2013-12-09 Thread Baptiste
Hi Clemence, If I were you, I would ask HAProxy to forward client IP address in an header named differently than X-Forwarded-For, something like X-Client-IP. Then configure you nginx to log the IP found in X-Client-IP and you're done. Baptiste

Re: Haproxy Load-Balance Scaling

2013-12-09 Thread Baptiste
On Fri, Dec 6, 2013 at 7:00 AM, Qingshan Xie xieq...@yahoo.com wrote: Hello Experts, not sure if this subject was already discussed or not, like to hear the advices and suggestions. If a single HAProxy instance as a load-balancer could not handle the high-load traffic, how to scale multiple

Re: Improving behaviour when nbproc 1

2013-12-09 Thread James Hogarth
On 4 Dec 2013 16:23, Chris Burroughs chris.burrou...@gmail.com wrote: On 12/03/2013 04:07 PM, Chris Burroughs wrote: This could just be me not being adept at email patches. Sorry if this is obvious but is this supposed to apply against 1.4 or 1.5? To answer my own question this applies

Re: Improving behaviour when nbproc 1

2013-12-09 Thread Chris Burroughs
On 12/09/2013 05:02 PM, James Hogarth wrote: To answer yes it is against 1.5 ... The caveats are the peers don't work and the session table and load balancing can get messed up due to the lack of shared information between processes but if you just need to utilise multiple stat sockets and the

RE: Compile warning on OS X

2013-12-09 Thread Lukas Tribus
Hi Igor, include/common/time.h:111:29: warning: implicit conversion from 'unsigned long' to '__darwin_suseconds_t' (aka 'int') changes value from 18446744073709551615 to -1 [-Wconstant-conversion] tv-tv_sec = tv-tv_usec = TV_ETERNITY; ~ ^~~ include/common/time.h:32:26: note:

RE: Haproxy Load-Balance Scaling

2013-12-09 Thread Lukas Tribus
Hi, Hello Experts, not sure if this subject was already discussed or not, like to hear the advices and suggestions. If a single HAProxy instance as a load-balancer could not handle the high-load traffic, how to scale multiple instances as a group of load-balancers to handle the high-load?

RE: Three patches to the haproxy-systemd-wrapper

2013-12-09 Thread Lukas Tribus
Hi folks, On Sat, 23 Nov 2013 12:05:24 +0100 Willy Tarreau w...@1wt.eu wrote: Hi Mark-Antoine, On Sat, Nov 23, 2013 at 07:37:21PM +0900, Marc-Antoine Perennou wrote: I don't have access to a computer to actually test those, but: - the first one looks nice, never felt really confident

Re: Three patches to the haproxy-systemd-wrapper

2013-12-09 Thread Willy Tarreau
Hi Lukas, On Tue, Dec 10, 2013 at 01:12:59AM +0100, Lukas Tribus wrote: Hi folks, On Sat, 23 Nov 2013 12:05:24 +0100 Willy Tarreau w...@1wt.eu wrote: Hi Mark-Antoine, On Sat, Nov 23, 2013 at 07:37:21PM +0900, Marc-Antoine Perennou wrote: I don't have access to a computer to