Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Willy Tarreau
On Sat, Oct 03, 2015 at 12:55:33AM -0700, Daren Sefcik wrote: > > Is there some kernel messages > > Load, swap usage, disk space > > > again, according to my limited know how, top and other built in utilities > all report the system is barely doing anything and there is tons of memory > and disk

Re: MINOR: doc-lua: few typos.

2015-10-04 Thread Willy Tarreau
Resending after some mails were lost du to low space on device... On Fri, Oct 02, 2015 at 11:07:05PM +0200, Willy Tarreau wrote: > On Fri, Oct 02, 2015 at 12:02:27PM +0100, David Carlier wrote: > > Hi, > > > > found few typos in the lua doc. > > Applied, thanks David! > > Willy >

Re: [PATCH] BUG: config: external-check command validation is checking for incorrect arguments.

2015-10-04 Thread Willy Tarreau
Resending after some mails were lost du to low space on device... On Fri, Oct 02, 2015 at 11:15:35PM +0200, Willy Tarreau wrote: > On Fri, Oct 02, 2015 at 03:56:58PM +0200, Igor Wiedler wrote: > > Hello, > > > > I wanted to test the external-check option in 1.6 (master) and it seems like > > the

Re: [PATCH]: BUG/MINOR: Wrong setsockopt for TTL fallback, "silent-drop" function

2015-10-04 Thread Willy Tarreau
Resending after some mails were lost du to low space on device... On Fri, Oct 02, 2015 at 11:04:51PM +0200, Willy Tarreau wrote: > Hi David, > > On Tue, Sep 29, 2015 at 02:53:44PM +0100, David Carlier wrote: > > Hi, > > This little patch avoids a build issue on systems different than Linux. > >

Re: [PATCH 1/1] MINOR: cli: Dump all resolvers stats if no resolver

2015-10-04 Thread Willy Tarreau
At first glance it seems OK. Baptiste, can you please quickly check and let me know if you don't see any issue there so that I can merge it ? Willy On Fri, Oct 02, 2015 at 03:41:06PM -0500, Andrew Hayworth wrote: > Hi all - > > Below is a patch for the 'show stat resolvers' cli command. It

req_ssl_ver ACL not working

2015-10-04 Thread Julien Vehent
Hi everyone, I'm working on a configuration that routes to a different backend based on the TLS version, using: acl modern_tls req_ssl_ver 3.3 However, it appears that the acl never returns true. I'm testing with: $ openssl s_client -connect :443 -servername -tls1_2 I tried various

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread joris dedieu
Hi, Just a few translation Linux -> FreeBSD. As pfSense is FreeBSD based. 2015-10-04 10:56 GMT+02:00 Willy Tarreau : > On Sat, Oct 03, 2015 at 12:55:33AM -0700, Daren Sefcik wrote: >> > Is there some kernel messages >> > Load, swap usage, disk space >> > >> again, according to my

Re: req_ssl_ver ACL not working

2015-10-04 Thread Cyril Bonté
Hi, Le 04/10/2015 17:16, Julien Vehent a écrit : Hi everyone, I'm working on a configuration that routes to a different backend based on the TLS version, using: acl modern_tls req_ssl_ver 3.3 However, it appears that the acl never returns true. I'm testing with: $ openssl s_client

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Willy Tarreau
On Sun, Oct 04, 2015 at 12:09:26PM -0700, Daren Sefcik wrote: > On Sun, Oct 4, 2015 at 7:30 AM, joris dedieu wrote: > > > Broadcom NICs : you should check man 4 bge and > > https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards > > > > While I had

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Willy Tarreau
On Sun, Oct 04, 2015 at 12:36:07PM -0700, Daren Sefcik wrote: > > > > > > Interesting, so maybe in fact you're running on cards with an old horrible > > firmware like what I described in the previous e-mail. > > > > Possible I suppose but these are brand new Dell systems, just got them a > few a

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Daren Sefcik
On Sun, Oct 4, 2015 at 7:30 AM, joris dedieu wrote: > Broadcom NICs : you should check man 4 bge and > https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards > While I had already looked at this early in my troubleshooting process I totally screwed it

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Daren Sefcik
> > > Interesting, so maybe in fact you're running on cards with an old horrible > firmware like what I described in the previous e-mail. > Possible I suppose but these are brand new Dell systems, just got them a few a weeks ago. Any advice on how to check and I will do so. > Maybe your client

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Daren Sefcik
On Sun, Oct 4, 2015 at 1:03 PM, Willy Tarreau wrote: > I don't know how you can do on FreeBSD. On Linux you check with ethtool -i. > The worst versions of the chips reported firmware 1.9.6, though several > more recent ones still had problems but not *that* important. > Does this

Re: HAProxy Slows At 1500+ connections Really Need some help to figure out why

2015-10-04 Thread Willy Tarreau
On Sun, Oct 04, 2015 at 01:10:26PM -0700, Daren Sefcik wrote: > On Sun, Oct 4, 2015 at 1:03 PM, Willy Tarreau wrote: > > > I don't know how you can do on FreeBSD. On Linux you check with ethtool -i. > > The worst versions of the chips reported firmware 1.9.6, though several > > more

Frontend ACL rewrites URL incorrectly to backend

2015-10-04 Thread Daren Sefcik
I am trying to make some requests go to specific backends but am finding that in certain backends that the url gets doubled up or otherwise mangled, ie: request to frontend = http://my.company.com what the backend server ends up with = http://my.company.comhttp:// my.company.com This does not

weld mesh

2015-10-04 Thread Anna
We are the manufacturer of welded wire mesh. 1. for construction and building material : to be used for coal mine tunnel protection ,tunnel liner ,house floor , roof, reinforce the concrete and brick for the wall,bridge,road,for fence 1)Weded wire mesh panel fence: to fence the

Re: req_ssl_ver ACL not working

2015-10-04 Thread Julien Vehent
On 2015-10-04 13:19, Cyril Bonté wrote: Hi, Le 04/10/2015 17:16, Julien Vehent a écrit : Hi everyone, I'm working on a configuration that routes to a different backend based on the TLS version, using: acl modern_tls req_ssl_ver 3.3 However, it appears that the acl never returns true.