Re: Configuration file issue with ssl/verify ordering

Hi Marshall, Le 07/03/2016 16:56, Marshall, Owen (GE Appliances) a écrit : Hi there, I'm seeing some odd behavior with HAProxy 1.6.3 and the ordering of ssl & verify in my configuration file. I'm not sure if this is truly a bug or a misunderstanding on my part. We are attempting to set up H

Configuration file issue with ssl/verify ordering

Hi there, I'm seeing some odd behavior with HAProxy 1.6.3 and the ordering of ssl & verify in my configuration file. I'm not sure if this is truly a bug or a misunderstanding on my part. We are attempting to set up HAProxy to load balance SSL-enabled servers, but aren't currently concerned wi

Re: Issue with SSL

Thanks Baptiste. The performance for SSL vs regular is very bad. Could someone help with that? Following is the configuration, test result and the monitoring tool results (the last is interesting). - Configuration file - global daemon maxconn

Re: Issue with SSL

On Wed, May 13, 2015 at 2:16 PM, Krishna Kumar (Engineering) wrote: > Hi Baptiste, > > Thank you very much for the tips. I have nbproc=8 in my configuration. Made > the > following changes: > > Added both bind and tune.bufsize changeresult -> > works. > Removed the tune.buf

Re: Issue with SSL

Hi Baptiste, Thank you very much for the tips. I have nbproc=8 in my configuration. Made the following changes: Added both bind and tune.bufsize changeresult -> works. Removed the tune.bufsize result -> works. Added bind-process for frontend and backend as: bind-pr

Re: Issue with SSL

On Wed, May 13, 2015 at 10:07 AM, Krishna Kumar (Engineering) wrote: > Hi all, > > I am having the following problem with SSL + large I/O. Details are: > > Distribution: Debian 7, Kernel: 3.19.6, ab version: 2.3, haproxy: 1.5.12, > nginx: 1.2.1 > > $ ab -k -n 10 -c 100 http://:80/128K > Works

Issue with SSL

Hi all, I am having the following problem with SSL + large I/O. Details are: Distribution: Debian 7, Kernel: 3.19.6, ab version: 2.3, haproxy: 1.5.12, nginx: 1.2.1 $ ab -k -n 10 -c 100 http://:80/128K Works correctly. $ ab -k -n 1 -c 10 https://:443/4K Works correctly. $ ab -k -n 1

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

On Wed, Sep 10, 2014 at 09:21:21AM +, Andreas Mock wrote: > Hi Willy, > > which trace would help? > On the server side? > Do you mean a TCP dump or which trace do you think of? Yes, a tcpdump with full packets on the server side (clear text) so that we know whether the response is compatible

AW: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

gt; Cc: haproxy > Betreff: Re: [ADDENDUM] Performance issue with SSL and keep alive, weird > result of ab test > > On Wed, Sep 10, 2014 at 08:32:05AM +, Andreas Mock wrote: > > Hi Willy, > > > > thank you for your answer. > > > > Do you have an explanation

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

On Wed, Sep 10, 2014 at 08:32:05AM +, Andreas Mock wrote: > Hi Willy, > > thank you for your answer. > > Do you have an explanation for the fact that > ab keep-alive without SSL seems to work correct but > as soon as SSL is enabled performance degrades as > shown? Unfortunately no, I have

AW: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

ilto:w...@1wt.eu] > Gesendet: Mittwoch, 10. September 2014 07:32 > An: Andreas Mock > Cc: haproxy > Betreff: Re: [ADDENDUM] Performance issue with SSL and keep alive, weird > result of ab test > > Hi Andreas, > > On Tue, Sep 09, 2014 at 03:05:36PM +, Andreas Mock wrote: >

Re: [ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

Hi Andreas, On Tue, Sep 09, 2014 at 03:05:36PM +, Andreas Mock wrote: > Hi all, > > I did the ab test with concurrency = 1 and keep-alive. > I found the following log entries written by HAProxy. > > Sep 9 16:54:20 server haproxy[29183]: :60646 > [09/Sep/2014:16:54:20.014] fe_ssl_st

[ADDENDUM] Performance issue with SSL and keep alive, weird result of ab test

roxy side triggers a new request. Can someone put light on this "Keep-Alive" behaviour? Best regards Andreas Mock > -Ursprüngliche Nachricht- > Von: Andreas Mock [mailto:andreas.m...@drumedar.de] > Gesendet: Dienstag, 9. September 2014 16:34 > An: haproxy > Betre

Performance issue with SSL and keep alive, weird result of ab test

Hi all, I'm just doing some performance test on a ha-proxy 1.5.4 and 'ab' on the client side: * http => OK * https => OK * https + Keep-Alive => NOT OK (really bad performance) Can someone explain this result to me. What did I miss? Here the relevant config: -8<-