Re: NOSRV/BADREQ from some Java based clients [SSL handshake issue]

2015-02-23 Thread Jinn Ko
A bit late to this discussion but the issues sound familiar. I've seen this type of issue in the past between openssl and java's ssl implementation, primarily in java 6 and java 7. I don't remember the full details but from what I recall avoiding the EC based ciphers from the supported list

Re: AW: GA Release of 1.5

2013-09-24 Thread Jinn Ko
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, It's good to get a better idea of what's needed to see a GA release of 1.5. We've been keenly awaiting the GA release, and I certainly understand the need to ensure the high performance that we've all come to expect of HAProxy. In this case,

Re: nginx alone performs x2 than haproxy-nginx

2012-05-02 Thread Jinn Ko
On 29/04/2012 20:01, Willy Tarreau wrote: What I could suggest would be : - reduce /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_time_wait to 30s - increase /proc/sys/net/netfilter/nf_conntrack_max to 524288 conns. - increase hashsize to 131072 buckets. This will help you support