Fwd: haproxy1.9, SPOA: too many open files

2019-04-10 Thread Kevin Zhu
-- Forwarded message - From: Kevin Zhu Date: Wed, 10 Apr 2019 at 14:25 Subject: Re: haproxy1.9, SPOA: too many open files To: Christopher Faulet Thinks reply. OS: CentOS Linux release 7.4 HW: platform: KVM; CPU: Intel Xeon E3-12xx v2 (Ivy Bridge) * 1; mem: 2048M HAProxy

Re: haproxy1.9, SPOA: too many open files

2019-04-10 Thread Kevin Zhu
I'm sorry for my english, there have a typo: multi threads single thread -> multi threads single proc. Pardon me. On Wed, 10 Apr 2019 at 14:44, Kevin Zhu wrote: > > > -- Forwarded message - > From: Kevin Zhu > Date: Wed, 10 Apr 2019 at 14:25 > Subject: Re: haproxy1.9, SPOA:

Re: [External] Re: QAT intermittent healthcheck errors

2019-04-10 Thread Marcin Deranek
Hi Emeric, Our process limit in QAT configuration is quite high (128) and I was able to run 100+ openssl processes without a problem. According to Joel from Intel problem is in cleanup code - presumably when HAProxy exits and frees up QAT resources. Will try to see if I can get more debug

Re: [PATCH] ssl certificates load speedup and dedup (pem/ctx)

2019-04-10 Thread Emmanuel Hocdet
Hi, Updated patch serie: Fix OpenSSL < 1.0.2 compatibilty. More generic key for issuers ebtree. ++ Manu 0001-REORG-ssl-promote-cert_key_and_chain-handling.patch Description: Binary data 0002-MINOR-ssl-use-STACK_OF-for-chain-certs.patch Description: Binary data

Re: Abort on exit "libgcc_s.so.1 must be installed for pthread_cancel to work"

2019-04-10 Thread Emmanuel Hocdet
> Le 5 avr. 2019 à 13:05, William Lallemand a écrit : > > On Fri, Apr 05, 2019 at 12:55:11PM +0200, Emmanuel Hocdet wrote: >> >> Hi, >> >> To test deinit, i come across this: >> >> # /srv/sources/haproxy/haproxy -f /etc/haproxy/ssl.cfg -d -x >> /run/haproxy_ssl.sock -sf 15716 >> >> log

Re: Abort on exit "libgcc_s.so.1 must be installed for pthread_cancel to work"

2019-04-10 Thread William Lallemand
On Wed, Apr 10, 2019 at 12:44:27PM +0200, Emmanuel Hocdet wrote: > > Hi Emmanuel, > > > > This bug is caused by libpthread which is not linked with libgcc_s, so it > > tries > > to load libgcc_s during the call to phtread_exit() but that can't work if > > the > > process is chroot'ed. > > > >

[PATCH] MINOR: ssl: Activate aes_gcm_dec converter for BoringSSL

2019-04-10 Thread Emmanuel Hocdet
Hi, If you can consider this patch. BoringSSL actually mimic OpenSSL 1.1.0 and have OPENSSL_VERSION_NUMBER set accordly. ++ Manu 0001-MINOR-ssl-Activate-aes_gcm_dec-converter-for-BoringS.patch Description: Binary data

Re: 1.9.6: SIGFPE in fwrr_update_position

2019-04-10 Thread Максим Куприянов
Hi! Any news about the reason of these faults? I can mention, that some of our backends set their weights with the help of haproxy agent. Could it be the reason? чт, 4 апр. 2019 г. в 14:22, Максим Куприянов : > Hi, everybody! > > Got multiple incidents of failure with 1.9.6: > Core was

[PATCH] MINOR: skip get_gmtime where tm is unused

2019-04-10 Thread Robin H. Johnson
For LOG_FMT_TS (%Ts), the tm variable is not used, so save some cycles on the call to get_gmtime. Backport: 1.9 1.8 Signed-off-by: Robin H. Johnson --- src/log.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/log.c b/src/log.c index f8d3414e2..39e472b33 100644 --- a/src/log.c +++

Re: segfault using cache with 1.9.4

2019-04-10 Thread Cyril Bonté
Le 10/04/2019 à 22:52, Lukas Tribus a écrit : On Wed, 10 Apr 2019 at 17:07, Juan Pablo Mora wrote: acl is_static url_beg /lgt/lgtfrontend/library/ or /lgt/lgtfrontend/pdfjs/ or /lgt/lgtfrontend/img/ That's not the correct syntax. That would be: acl is_static url_beg

segfault using cache with 1.9.4

2019-04-10 Thread Juan Pablo Mora
Error: Apr 10 16:54:46 cesixweb01 systemd: Started HAProxy Load Balancer. Apr 10 16:54:46 cesixweb01 haproxy: [NOTICE] 099/165446 (126619) : New worker #1 (126621) forked Apr 10 16:54:47 cesixweb01 kernel: haproxy[126621]: segfault at 1f ip 0050069d sp 7fff46157710 error 4 in

Re: [External] Re: QAT intermittent healthcheck errors

2019-04-10 Thread Emeric Brun
Hi Marcin, On 4/10/19 1:02 PM, Marcin Deranek wrote: > Hi Emeric, > > Our process limit in QAT configuration is quite high (128) and I was able to > run 100+ openssl processes without a problem. According to Joel from Intel > problem is in cleanup code - presumably when HAProxy exits and frees

Re: [External] Re: QAT intermittent healthcheck errors

2019-04-10 Thread Emeric Brun
Hi Marcin, > You can also use the 'master CLI' using '-S' and you could check if it > remains sessions on those older processes (doc is available in management.txt) Here the doc: https://cbonte.github.io/haproxy-dconv/1.9/management.html#9.4 Emeric

v1.9.x segfault on LIST_DEL(>wait_queue)

2019-04-10 Thread William Dauchy
Hello, We are seeing a quite regular segfault when haproxy v1.9 joins our cluster and almost immediately crash with: #0 0x55b66f75c825 in do_unbind_listener (listener=listener@entry=0x55b67206dcb0, do_close=do_close@entry=1) at src/listener.c:328 328

v1.9.6 high CPU usage

2019-04-10 Thread LCF
Hi, I'm using haproxy 1.9.6 from deb repo: #v+ ~# haproxy -vv HA-Proxy version 1.9.6-1ppa1~bionic 2019/03/30 - https://haproxy.org/ Build options : TARGET = linux2628 CPU = generic CC = gcc CFLAGS = -O2 -g -O2 -fdebug-prefix-map=/build/haproxy-YXfmbO/haproxy-1.9.6=.

Re: segfault using cache with 1.9.4

2019-04-10 Thread Lukas Tribus
On Wed, 10 Apr 2019 at 17:07, Juan Pablo Mora wrote: > acl is_static url_beg /lgt/lgtfrontend/library/ or > /lgt/lgtfrontend/pdfjs/ or /lgt/lgtfrontend/img/ That's not the correct syntax. That would be: acl is_static url_beg /lgt/lgtfrontend/library/ acl is_static url_beg