Re: SSL farm

2012-05-22 Thread Bar Ziony
if a SSL server dies, LVS can direct the traffic to another server. Alternatively you can save SSL sessions in memcached for example, to share between SSL servers in the SSL farm. I once stumbled upon a patch for nginx that can do that. Regards, Bar. On Tue, May 22, 2012 at 9:16 PM, Allan Wind

CD state in error log

2012-05-17 Thread Bar Ziony
Hi, I'm seeing lots of these errors lately: May 17 19:01:32 lb-01 haproxy[25531]: 2.51.83.90:38410[17/May/2012:19:01:31.687] public static/web-01 0/0/0/1/576 200 58381 - - CD-- 3201/3201/26/10/0 0/0 GET /js/all.min.js?v=163bb6a7e70d HTTP/1.1 This is on static images. I don't think that my

Re: BADREQ on production haproxy

2012-05-12 Thread Bar Ziony
. On Sat, May 12, 2012 at 10:39 AM, Willy Tarreau w...@1wt.eu wrote: Hi Bar, On Thu, May 10, 2012 at 07:02:58PM +0300, Bar Ziony wrote: Hey, We're running haproxy 1.4.20 as our LB, nginx is listening on the same machine on port 443 and terminating SSL, proxying the unencrypted requests

Re: BADREQ on production haproxy

2012-05-12 Thread Bar Ziony
...@1wt.eu wrote: On Sat, May 12, 2012 at 01:23:17PM +0200, Baptiste wrote: On Sat, May 12, 2012 at 1:01 PM, Bar Ziony bar...@gmail.com wrote: Willy, Thank you, I will follow up with your suggestions soon. But I just had a production down-time with the haproxy machine: After posting

Stats for backend queue

2012-05-12 Thread Bar Ziony
Hey, I have a dynamic backend with maxconn 80 with multiple servers. Many times I can see on the haproxy stats page that servers on this backend are reaching their maximum 80, but I don't see the number of requests currently in queue. The maximum number I ever see is 80. Why is that? Can I

Re: Stats for backend queue

2012-05-12 Thread Bar Ziony
Willy, thanks for your answer. On Sat, May 12, 2012 at 7:21 PM, Willy Tarreau w...@1wt.eu wrote: On Sat, May 12, 2012 at 07:01:19PM +0300, Bar Ziony wrote: Hey, I have a dynamic backend with maxconn 80 with multiple servers. Many times I can see on the haproxy stats page that servers

Re: BADREQ on production haproxy

2012-05-12 Thread Bar Ziony
Hi Willy, On Sat, May 12, 2012 at 7:08 PM, Willy Tarreau w...@1wt.eu wrote: On Sat, May 12, 2012 at 06:54:06PM +0300, Bar Ziony wrote: I have no problem increasing the RAM if needed, but how do I know if it's needed? Where can I see the number of connections per second to see if I

Re: Stats for backend queue

2012-05-12 Thread Bar Ziony
Hi Willy :) On Sat, May 12, 2012 at 10:06 PM, Willy Tarreau w...@1wt.eu wrote: On Sat, May 12, 2012 at 08:43:43PM +0300, Bar Ziony wrote: So session rate is the number of requests per second ? Why is it called session then if it's really requests? You have the two. Initially in haproxy

Re: Stats for backend queue

2012-05-12 Thread Bar Ziony
Oh, thanks. Small value = 10 sec for example? :| What is an optimal keepalive timeout? Thanks, Bar. On Sat, May 12, 2012 at 10:51 PM, Cyril Bonté cyril.bo...@free.fr wrote: Hi, Le 12/05/2012 21:42, Bar Ziony a écrit : OK, got why there are more frontend sessions than backend sessions

Re: Stats for backend queue

2012-05-12 Thread Bar Ziony
Tarreau w...@1wt.eu wrote: On Sat, May 12, 2012 at 11:04:49PM +0300, Bar Ziony wrote: Oh, thanks. Small value = 10 sec for example? :| What is an optimal keepalive timeout? I like to use just a few seconds so that all objects from the same page are fetched at once and the connection

Re: Stats for backend queue

2012-05-12 Thread Bar Ziony
...@1wt.eu wrote: On Sat, May 12, 2012 at 11:31:03PM +0300, Bar Ziony wrote: Is there a benefit to allow a larger keepalive timeout so more than resources from 1 page will be downloaded, or is it just best to create a new connection for succeeding pages? It depends on your available memory

BADREQ on production haproxy

2012-05-10 Thread Bar Ziony
Hey, We're running haproxy 1.4.20 as our LB, nginx is listening on the same machine on port 443 and terminating SSL, proxying the unencrypted requests to haproxy on localhost:80. I see many of these errors on the haproxy log: May 10 15:54:06 lb-01 haproxy[6563]:

Re: HAProxy and SSL traffic termination

2012-05-03 Thread Bar Ziony
Alexander, I just implemented such a setup, with nginx listening on the LB for HTTP requests (port 443), proxying via HTTP to haproxy on the same machine. HTTP requests are coming straight to haproxy and from there to our app servers. There is a 2nd LB that is a replica of the first, and a

Re: HAProxy and SSL traffic termination

2012-05-03 Thread Bar Ziony
Adding the list. On Thu, May 3, 2012 at 11:09 AM, Bar Ziony bar...@gmail.com wrote: Alexander, Yes, we're using Linode servers. I chose the 1024 linode. Since it's very easy to change that, choose something and test :) I've reached around 800 req/sec with SSL and ~5000 req/sec with HTTP

nginx alone performs x2 than haproxy-nginx

2012-04-29 Thread Bar Ziony
Hi, I have 2 questions about a haproxy setup I configured. This is the setup: LB server (haproxy 1.4.20, debian squeeze 64-bit) in http mode, forwarding requests to a single nginx web server, that resides on a different machine. I'll paste the haproxy config at the end of this message. 1.

Re: nginx alone performs x2 than haproxy-nginx

2012-04-29 Thread Bar Ziony
maxconn - what is a high maxconn number? Just the limit I can see with 'ab'? Thanks, Bar. On Sun, Apr 29, 2012 at 4:27 PM, Willy Tarreau w...@1wt.eu wrote: Hi Bar, On Sun, Apr 29, 2012 at 02:09:42PM +0300, Bar Ziony wrote: Hi, I have 2 questions about a haproxy setup I configured

Re: nginx alone performs x2 than haproxy-nginx

2012-04-29 Thread Bar Ziony
Willy, Thanks as always for the very detailed and helpful answer. I'll reply in-line, like you ;-) On Sun, Apr 29, 2012 at 7:18 PM, Willy Tarreau w...@1wt.eu wrote: On Sun, Apr 29, 2012 at 05:25:01PM +0300, Bar Ziony wrote: Hi Willy, Thanks for your time. I really didn't know