Re: hardware / os recommendations

2016-06-30 Thread Gerd Mueller
Am Donnerstag, den 30.06.2016, 09:23 +1000 schrieb Igor Cicimov: On 29 Jun 2016 6:56 pm, "Gerd Mueller" <gerd.muel...@mikatiming.de<mailto:gerd.muel...@mikatiming.de>> wrote: > > Hi list, > > I am about to plan the update of our loadbalancing infrastructu

hardware / os recommendations

2016-06-29 Thread Gerd Mueller
Hi list, I am about to plan the update of our loadbalancing infrastructure. Before I start I would like to get your comments and recommendations. Right now I would like to install a two node cluster based on CentOS7 and haproxy 1.6. Because SSL is more and more important the new setup should

Re: ssl offloading

2016-04-08 Thread Gerd Mueller
wow! Thanks, again Gerd Weitergeleitete Nachricht Von: Pavlos Parissis <pavlos.paris...@gmail.com> An: Andrew Hayworth <andrew.haywo...@getbraintree.com>, Gerd Mueller Kopie: haproxy@formilux.org <haproxy@formilux.org> Betreff: Re: ssl offloading Datum: Sun

Re: ssl offloading

2016-04-01 Thread Gerd Mueller
Ok sounds good. Thanks for the input. Gerd Weitergeleitete Nachricht Von: Vincent Bernat <ber...@luffy.cx> An: Conrad Hoffmann <con...@soundcloud.com> Kopie: Gerd Mueller <gerd.muel...@mikatiming.de>, haproxy@formilux.org <haproxy@formilux.org> Betreff:

ssl offloading

2016-03-31 Thread Gerd Mueller
Hi list, what are your ideas about offloading of ssl? ssl inside haproxy is nice but is very expensive. So I would like to offload the ssl to something else.  Any ideas? Thanks, Gerd

map_dom vs map_str

2016-03-31 Thread Gerd Mueller
Hi all, just read in the documentation that map_str uses a balanced tree vs. map_dom is using a list. So why should I use map_dom? Right now I am using following: use_backend %[req.hdr(host),lower,map_dom(/etc/haproxy/hostname2backend.map,default _backend)]  Would map_str improve the

Re: openfiles / ulimit

2011-10-07 Thread Gerd Mueller
Hi Willy, I'm quite sure that either your frontend (or defaults) maxconn is limited, please check your config, this should very likely be the reason. I don't see any limit reached on frontend or backend. We had a lot of traffic but not so much connections at this day. Could this be a reason?

Re: openfiles / ulimit

2011-10-07 Thread Gerd Mueller
No, there clearly is no reason why you would have a direct relation between traffic and concurrent connections. Are you sure your process was not started as user and limited to 1024 fds when the issue appeared ? I've checked /proc/`pidof haproxy`/limits Limit Soft Limit

openfiles / ulimit

2011-10-04 Thread Gerd Mueller
(bandwidth and connections) on Sunday and the graph showed no difference. HAProsy's stats site gives me following values: system limits: memmax = unlimited; ulimit-n = 60135 I wonder if I have a ulimit problem or not. Anybody andy thoughts? Best wishes, Gerd -- Gerd Mueller Föhrenhain 14 91154 roth

Re: openfiles / ulimit

2011-10-04 Thread Gerd Mueller
Forgot the chart ... Gerd -- Gerd Mueller Föhrenhain 14 91154 roth Phone: +49 (0)9171-60133 Fax: +49 (0)9171-60135 email: gmuel...@it4sport.de WEB Adresse: blog.it4sport.de Key ID: 6CC95F7C Am Dienstag, den 04.10.2011, 09:21 +0200 schrieb Gerd Mueller: Hi all, Since Friday I am