Re: Recommendations for a new haproxy installation

2015-05-28 Thread Willy Tarreau
On Thu, May 28, 2015 at 10:43:37AM -0600, Shawn Heisey wrote: > On 4/30/2015 11:50 PM, Willy Tarreau wrote: > > If you're working on preparing the OS, please *do* verify that > > conntrack is properly tuned (large hash table with at least 1/4 of the > > total number of sessions). Otherwise under lo

Re: Recommendations for a new haproxy installation

2015-05-28 Thread Shawn Heisey
On 4/30/2015 11:50 PM, Willy Tarreau wrote: > If you're working on preparing the OS, please *do* verify that > conntrack is properly tuned (large hash table with at least 1/4 of the > total number of sessions). Otherwise under load it will become > extremely slow. When I asked about recommendation

Re: Recommendations for a new haproxy installation

2015-04-30 Thread Willy Tarreau
On Wed, Apr 29, 2015 at 03:00:58PM -0600, Shawn Heisey wrote: > I have an existing load balancer installation that I have been slowly > migrating from IPVS to haproxy. It's CentOS 6, so many components are > out of date, such as TLS support. > > Once that migration is done, I would like to entire

Re: Recommendations for a new haproxy installation

2015-04-30 Thread Willy Tarreau
Hi, On Wed, Apr 29, 2015 at 10:58:36PM -0600, Shawn Heisey wrote: > On 4/29/2015 3:00 PM, Shawn Heisey wrote: > > How can I be sure that openssl is compiled with support for TLS > > acceleration in the CPU? I am compiling haproxy from source. Would you > > recommend that I install a separate and

Re: Recommendations for a new haproxy installation

2015-04-29 Thread Shawn Heisey
On 4/29/2015 3:00 PM, Shawn Heisey wrote: > How can I be sure that openssl is compiled with support for TLS > acceleration in the CPU? I am compiling haproxy from source. Would you > recommend that I install a separate and newer openssl from source for > explicit use with haproxy, and tweak its c

Recommendations for a new haproxy installation

2015-04-29 Thread Shawn Heisey
I have an existing load balancer installation that I have been slowly migrating from IPVS to haproxy. It's CentOS 6, so many components are out of date, such as TLS support. Once that migration is done, I would like to entirely replace the hardware and load an ideal software environment for hapro