Re: CPU saturated with 250Mbps traffic on frontend

2015-04-07 Thread Evgeniy Sudyr
Willy, I will post results when available. -- Evgeniy On Mon, Apr 6, 2015 at 3:24 PM, Willy Tarreau w...@1wt.eu wrote: On Mon, Apr 06, 2015 at 02:54:13PM +0200, Evgeniy Sudyr wrote: this is server with 2x Intel I350-T4 1G Quad port NICs, where on first card each NIC is connected to uplink

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
On Mon, Apr 06, 2015 at 12:34:05PM +0200, Evgeniy Sudyr wrote: Hi Willy, pleasure for me to get answer from you! 1) I've tested with OpenBSD's SP kernel and single process (no nbproc) in haproxy.conf and it was no significant difference in load. OK, I was not sure whether it was the SP

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
Hi Evgeniy, On Sun, Apr 05, 2015 at 06:29:53PM +0200, Evgeniy Sudyr wrote: Nenad, thank your answer! 1) this is only Haproxy server active (active/passive config exists, but using carp on OpenBSD). 2) As I understand with nbcproc 4 I can't get stats working correctly ... however at

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Evgeniy Sudyr
Hi Willy, pleasure for me to get answer from you! 1) I've tested with OpenBSD's SP kernel and single process (no nbproc) in haproxy.conf and it was no significant difference in load. I can't test to disable PF to test, because it's some kind of production router. 2) I guess solution is to get

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Evgeniy Sudyr
this is server with 2x Intel I350-T4 1G Quad port NICs, where on first card each NIC is connected to uplink provider and 2nd NIC 4 ports are used for trunk interface with lacp connected to internal 1Gb switch with lacp configured as well. I've tested uplinks and internal link with iperf and was

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Baptiste
On Mon, Apr 6, 2015 at 2:54 PM, Evgeniy Sudyr eject.in...@gmail.com wrote: Btw, where Pavlos reported his test results? There in list or somewhere else? On this ML. Pavlos was running Linux ;) Baptiste

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-06 Thread Willy Tarreau
On Mon, Apr 06, 2015 at 02:54:13PM +0200, Evgeniy Sudyr wrote: this is server with 2x Intel I350-T4 1G Quad port NICs, where on first card each NIC is connected to uplink provider and 2nd NIC 4 ports are used for trunk interface with lacp connected to internal 1Gb switch with lacp configured

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-05 Thread Evgeniy Sudyr
Lukas, thank you for pointing to possible keep-alive issues, I've tested it before, but did it again just to make one more check! I've increased keep alives timeout to 10se and removed http-server-close, restarted haproxy :) Changes I've noted - haproxy reduced from AVG 78% to AVG 75% per each

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-05 Thread Nenad Merdanovic
Evgeniy, On 4/5/2015 4:47 PM, Evgeniy Sudyr wrote: Lukas, thank you for pointing to possible keep-alive issues, I've tested it before, but did it again just to make one more check! I've increased keep alives timeout to 10se and removed http-server-close, restarted haproxy :) Changes I've

RE: CPU saturated with 250Mbps traffic on frontend

2015-04-05 Thread Lukas Tribus
Hi all, haproxy is used for http and https load balancing with TLS termination on haproxy side. I'm using openbsd -stable on this box. I got CPU saturated with 250Mbps traffic in/out summary on frontend NICs and 3000 ESTABLISHED connections on frontent interface to haproxy. Remove:

CPU saturated with 250Mbps traffic on frontend

2015-04-05 Thread Evgeniy Sudyr
Hi all, haproxy is used for http and https load balancing with TLS termination on haproxy side. I'm using openbsd -stable on this box. I got CPU saturated with 250Mbps traffic in/out summary on frontend NICs and 3000 ESTABLISHED connections on frontent interface to haproxy. # all connections to

Re: CPU saturated with 250Mbps traffic on frontend

2015-04-05 Thread Evgeniy Sudyr
Nenad, thank your answer! 1) this is only Haproxy server active (active/passive config exists, but using carp on OpenBSD). 2) As I understand with nbcproc 4 I can't get stats working correctly ... however at the moment I see that for https frontend I have : Current connection rate:58/s