Re: haproxy segfault

2019-02-15 Thread Willy Tarreau
On Tue, Feb 12, 2019 at 10:28:01PM +0100, Lukas Tribus wrote: > > Did this bug has been introduced in 1.9.4 ? > > I haven't notice this behavior before. > > Yes. Also see the 1.8.19 release notes. I forgot we backported it to 1.9.4, I thought it was only queued after 1.9.4, we should have emitted

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Willy Tarreau
On Fri, Feb 15, 2019 at 08:35:58PM -0200, Joao Morais wrote: > This is just theory - and 5 digits starts on 1 =) . The problem is the > " if " multiplied by 3000 or so. > Moving everything to the backend or a map is a really big step forward. I > suspect my frontend will have about 10 lines

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Joao Morais
> Em 15 de fev de 2019, à(s) 19:22, Aleksandar Lazic > escreveu: > > Am 15.02.2019 um 22:11 schrieb Joao Morais: >> >> Hey Aleks, this made my day. Thank you for remember me that map exist and a >> big thank you to The Author of map, map_beg and map_reg converters! Time to >> achieve a 5 dig

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Aleksandar Lazic
Am 15.02.2019 um 22:11 schrieb Joao Morais: > >> Em 15 de fev de 2019, à(s) 08:43, Aleksandar Lazic >> escreveu: >> >> Hi Joao. >> >> Am 15.02.2019 um 11:15 schrieb Joao Morais: >>> >>> Hi Aleks, sure. Regarding the config, it has currently about 4k lines >>> only in the largest frontend becau

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Joao Morais
> Em 15 de fev de 2019, à(s) 08:43, Aleksandar Lazic > escreveu: > > Hi Joao. > > Am 15.02.2019 um 11:15 schrieb Joao Morais: >> >> Hi Aleks, sure. Regarding the config, it has currently about 4k lines only >> in the largest frontend because of the number of hostnames and paths being >> s

Re: HAProxy in front of Docker Enterprise problem

2019-02-15 Thread Joao Morais
> Em 12 de fev de 2019, à(s) 21:21, Norman Branitsky > escreveu: > > Do I have to make HAProxy listen on 8443 and just do a tcp frontend/backend > for the Manager nodes? You can bind on another port, you can also bind on another IP address (change *:443 to some.ip.addr:443). But if you wa

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Aleksandar Lazic
Hi Joao. Am 15.02.2019 um 11:15 schrieb Joao Morais: > > >> Em 15 de fev de 2019, à(s) 07:44, Aleksandar Lazic >> escreveu: >> >> Hi Joao. >> >> Am 15.02.2019 um 10:21 schrieb Joao Morais: >>> >>> Hi list, I'm tuning some HAProxy instances in front of a large kubernetes >>> cluster. The config

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Joao Morais
> Em 15 de fev de 2019, à(s) 07:44, Aleksandar Lazic > escreveu: > > Hi Joao. > > Am 15.02.2019 um 10:21 schrieb Joao Morais: >> >> Hi list, I'm tuning some HAProxy instances in front of a large kubernetes >> cluster. The config has about 500 hostnames (a la apache/nginx virtual >> hosts),

Re: Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Aleksandar Lazic
Hi Joao. Am 15.02.2019 um 10:21 schrieb Joao Morais: > > Hi list, I'm tuning some HAProxy instances in front of a large kubernetes > cluster. The config has about 500 hostnames (a la apache/nginx virtual > hosts), 3 frontends, 1500 backends and 4000 servers. The first frontend is on > tcp mode bi

Tune HAProxy in front of a large k8s cluster

2019-02-15 Thread Joao Morais
Hi list, I'm tuning some HAProxy instances in front of a large kubernetes cluster. The config has about 500 hostnames (a la apache/nginx virtual hosts), 3 frontends, 1500 backends and 4000 servers. The first frontend is on tcp mode binding :443, inspecting sni and doing a triage; the second fr

Re: Early connection close, incomplete transfers

2019-02-15 Thread Aleksandar Lazic
Am 15.02.2019 um 08:47 schrieb Veiko Kukk: > On 2019-02-14 18:29, Aleksandar Lazic wrote: >>> Replaced HAproxy with Nginx for testing and with Nginx, not a single >>> connection >>> was interrupted, did millions of requests. >> >> In 1.9.4 are a lot of fixed added. >> please can you try your tests