Re: haproxy issue

2014-10-17 Thread Jarno Huuskonen
Hi, On Wed, Oct 15, pasquale scalea wrote: i have configure haproxy-1.5.4-1.el6.x86_64 with this config ... backend view_https mode tcp option tcplog option httpchk OPTIONS / http-check expect status 200 option ssl-hello-chk #make sure we can talk SSL, not just TCP

Re: HAProxy proxying JDBC requests two a percona cluster

2014-10-17 Thread Jarno Huuskonen
Hi, On Wed, Oct 15, Dennis Plöger | getit GmbH wrote: Hi! Hmm... I just understood, that we're probably talking about different things here. As you can see in my configuration, I haven't specify a maxconn value. From the configuration documentation I didn't understand, what the default

RE: Understanding haproxy cpu usage in ssl-offload scenario

2014-10-17 Thread Lukas Tribus
Hi Dennis, Now from what I read on the net about haproxy I expected that the load-balancing isn't that cpu intensive and that most of the cpu usage should be generated by the ssl offloading but what I'm seeing is that the two cores 0 and 4 are at 20% idle while the rest is at 80-90% idle

Stick-table misconfiguration; haproxy should throw error

2014-10-17 Thread Samuel Reed
I just wanted to report an issue that had me hitting my head on the table for a few hours: I reconfigured a development environment to use Chef to generate haproxy config files. Every 2-3 minutes or so, depending on load, haproxy would crash with a `trap divide error` (divide by zero). It

Question about srv_conn and beconn

2014-10-17 Thread 王继红
Hi haproxy team: I see the document about these: beconn is the total number of concurrent connections handled by the backend when the session was logged. srv_conn is the total number of concurrent connections still active on the server when the session was logged. fell confused about

Re: HAProxy proxying JDBC requests two a percona cluster

2014-10-17 Thread Dennis Plöger | getit GmbH
Hi! Maybe try with no option dontlognull ? Are all connections in logs logged with normal -- session state ? http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#8.5 Oh. Thanks for mentioning that page (I somehow never got there). I now saw, that the connections are dropped with cD

Re: HAProxy proxying JDBC requests two a percona cluster

2014-10-17 Thread Dennis Plöger | getit GmbH
Hello! Oh. Thanks for mentioning that page (I somehow never got there). I now saw, that the connections are dropped with cD - meaning, that HAproxy thought, the server would be down. Getting back on that. I understand, that D means that HAProxy thinks, the server is down. Shouldn't hatop

Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Heiko Burghardt
Hello Lukas, Thanks for your reply. You can find my additional information in your text below. Am 17.10.2014 um 01:32 schrieb Lukas Tribus luky...@hotmail.com: Gonna need to see your configuration to be able to help you, especially ssl and http related parts.

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Lukas Tribus
Hi Heiko, #- # test configuration #- frontend test1 bind *:443 ssl crt /etc/pki/tls/certs/domain.com-haproxy.pem #ciphers HIGH:RC4-SHA:!ADH #ciphers

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Lukas Tribus
Used the bind parameter before which did / does not help and created a tcpdump with the mentioned settings (DH = 1024 Bit and force tls) with your requested parameters. Something doesn't add up. The handshake you sent me is still negotiating TLSv1.2 and TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Heiko Burghardt
Hello Lukas, Am 17.10.2014 um 18:11 schrieb Lukas Tribus luky...@hotmail.com: Used the bind parameter before which did / does not help and created a tcpdump with the mentioned settings (DH = 1024 Bit and force tls) with your requested parameters. Something doesn't add up. The

RE: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Lukas Tribus
Hi Heiko, Currently, I start haproxy manually with this command (in the same shell I edit the config file, thus I have to stop haproxy with CTRL-C for changes): — haproxy -d -f /etc/haproxy/haproxy.cfg — I see. Can you run it through strace -tt, Not that I expect to see why the TLS

Re: Switching Java client to Websocket with SSL // Connection closed during SSL handshake

2014-10-17 Thread Heiko Burghardt
Hello Lukas, Thanks for your update. Currently, I start haproxy manually with this command (in the same shell I edit the config file, thus I have to stop haproxy with CTRL-C for changes): — haproxy -d -f /etc/haproxy/haproxy.cfg — I see. Can you run it through strace -tt, Not that I