Re: Optimizing HAProxy CPU usage for SSL

2024-02-01 Thread Miles Hampson
Hi Willy, Thanks for your response, I learned a lot from reading it. > So that would give roughly 4000 SSL req/sec max over all cores, or only > 166 per core, that sounds quite low! > > Normally on a modern x86 CPU core, you should expect roughly 500 RSA2048/s > per core and per GHz (or keep in

Re: Optimizing HAProxy CPU usage for SSL

2024-01-31 Thread Willy Tarreau
Hi Miles, On Thu, Feb 01, 2024 at 05:09:20PM +1100, Miles Hampson wrote: > Hi, > > We recently hit an issue where we observed the > haproxy_frontend_current_sessions reported by the prometheus endpoint > plateau at 4095 and some requests start dropping. Increasing the global and > listen maxconn

Optimizing HAProxy CPU usage for SSL

2024-01-31 Thread Miles Hampson
Hi, We recently hit an issue where we observed the haproxy_frontend_current_sessions reported by the prometheus endpoint plateau at 4095 and some requests start dropping. Increasing the global and listen maxconn from 4096 to something larger (as well as making the kernel TCP queues on our Ubuntu