Re: SSL hardware acceleration

, on connection keep alives, etc... Baptiste -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin-Charlottenburg Geschaeftsfuehrung: Jens Begemann, Philipp Moeser

Re: SSL hardware acceleration

. I can't remember where I have read that but in our tests the results were identical with and without the extension loaded. We're running on FreeBSD 9.2-Release Kind regards, John -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz

Re: SSL hardware acceleration

directly, and there isn't really much else of great espionage interest in the transactional data. So I'm not overly concerned about the backdoors in the Intel CPUs. Thanks for the useful information. Ari -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str

Loadtest Results

possible and we'll try to find them but so far we're happy with the results. Maybe someone here can comment whether they think these are good number or if we should be able to push much more through one machine. Kind regards, John -- John-Paul Bader | Software Development www.wooga.com wooga

Re: Inkonsistent forward-for

for that could be. Thanks in advance Jürgen -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin-Charlottenburg Geschaeftsfuehrung: Jens Begemann, Philipp Moeser

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

, John Willy Tarreau wrote: Hi John, On Fri, May 09, 2014 at 11:54:56AM +0200, John-Paul Bader wrote: Hey Willy, I have just applied the patch and will run another test after lunch. Since we're testing with live traffic I can't leave it unattended :) Just out of curiosity, is this a bug

Socket Read Errors and Timeouts on FreeBSD

for debugging this? Since it does not coredump it will be a bit harder I guess. Kind regards, John-Paul Bader -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin

Coredump when parsing previously working config

Hey, a config that worked fine on 1.5-dev24 now coredumps with dev25 from 2014-05-11 Config: http://smyck.org/haproxy/haproxy_coredump_cfg.txt CoreDump http://smyck.org/haproxy/config_coredump.txt Kind regards, John -- John-Paul Bader | Software Development www.wooga.com wooga GmbH

Re: Socket Read Errors and Timeouts on FreeBSD

to create a ktrace for a synthetic test run like this as it happens rather quickly after starting the test. Kind regards, John Willy Tarreau wrote: Hi John-Paul, On Tue, May 13, 2014 at 10:56:15AM +0200, John-Paul Bader wrote: Hey, after all the patches regarding the SSL crashes we started

Re: Socket Read Errors and Timeouts on FreeBSD

Ah damn it! :) Yes - pf was accidentally re-enabled after a reboot. Thank you … will continue doing load tests now. Kind regards, John Willy Tarreau wrote: On Tue, May 13, 2014 at 03:03:39PM +0200, John-Paul Bader wrote: Hey, we have already tried and disabled all custom sysctls

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

not necessarily the case. Anyway, please apply the attached patch on top of the two other ones, I'm really confident this time :-) I'm now going to merge it as well as Emeric's patches into mainline. Thanks a lot for all your tests John! Willy -- John-Paul Bader | Software Development

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

it, it was in relation with a high memory usage with SSL. Now I know where it was, so we'll issue an update :-) Thanks again for all your traces and tests! Willy -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

with kqueue and nbproc=12, option http-server-close and timeout http-keep-alive 5000 Kind regards, John Willy Tarreau wrote: Hi John, On Wed, May 07, 2014 at 10:54:33PM +0200, John-Paul Bader wrote: Hmm yeah I noticed from what you wrote in the mail and by reading through the patch - but still

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

Tarreau wrote: Hi John, On Wed, May 07, 2014 at 10:54:33PM +0200, John-Paul Bader wrote: Hmm yeah I noticed from what you wrote in the mail and by reading through the patch - but still it confirmed that the shared pthread thing was not available on FreeBSD right? Yes that's it. Old freebsd code did

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

Hey, Sure thing! I've just put an nokqueue in the config and its running again. Lets see :) Kind regards, John Willy Tarreau wrote: Hi John, On Thu, May 08, 2014 at 09:15:20AM +0200, John-Paul Bader wrote: Hey, so I have downloaded the haproxy-ss-Latest from the website and applied your

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

?\001j\000\000\000\000\000\020+A\000\000\000\000\000\002\002\000\000\000\000\000\000?\001j\000\000\000\000\000 , '\0' repeats 15 times, h\205F\000\000\000\000\000p\177\000\000 pidfd = 0 Kind regards, John -- John-Paul Bader | Software Development www.wooga.com wooga

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

to admit that I reach my levels of competence here so this is really just a wild guess but maybe you can confirm or deny that assumption. Kind regards, John Willy Tarreau wrote: On Thu, May 08, 2014 at 01:46:30PM +0200, Willy Tarreau wrote: On Thu, May 08, 2014 at 12:47:06PM +0200, John-Paul Bader

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

that already helps to narrow it down a bit. Kind regards, John Willy Tarreau wrote: Hi John-Paul, On Tue, May 06, 2014 at 11:57:08PM +0200, John-Paul Bader wrote: Hey, I will do more elaborate test runs in the next couple of days. No problem. I will create traces with ktrace which

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

, test result OK select : pref=150, test result OK Total: 3 (3 usable), will use kqueue. Kind regards, John -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

Hey Emeric, I have just consulted the Readme of the haproxy source and it says in the OpenSSL section: »The BSD and OSX makefiles do not support build options for OpenSSL nor zlib. Also, at least on OpenBSD, pthread_mutexattr_setpshared() does not exist so the SSL session cache cannot be

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

patch soon. Emeric original message- De: John-Paul Bader john-paul.ba...@wooga.net A: Willy Tarreau w...@1wt.eu Copie à: John-Paul Bader john-paul.ba...@wooga.net, Emeric Brun eb...@exceliance.fr, haproxy@formilux.org Date: Wed, 07 May 2014 22:09:28 +0200

haproxy 1.5-dev24: 100% CPU Load or Core Dumped

kern.maxfilesperproc=9 hw.igb.rx_process_limit=4096 -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin-Charlottenburg Geschaeftsfuehrung: Jens Begemann, Philipp Moeser

Re: haproxy 1.5-dev24: 100% CPU Load or Core Dumped

connection counts. Also, do you observe the problem only in multi-process mode or also with a single process ? Regards, Willy -- John-Paul Bader | Software Development www.wooga.com wooga GmbH | Saarbruecker Str. 38 | D-10405 Berlin Sitz der Gesellschaft: Berlin; HRB 117846 B Registergericht Berlin