Re: haproxy + ipsec -> general socket error

2015-10-16 Thread Willy Tarreau
On Fri, Oct 16, 2015 at 02:08:37PM +0200, wbmtfrdlxm wrote: > when using ipsec on the backend side, this error pops up in the haproxy log > from time to time: > > Layer4 connection problem, info: "General socket error (No buffer space > available) This error normally means that there is no

Re: haproxy + ipsec -> general socket error

2015-10-16 Thread wbmtfrdlxm
what linux distribution are you using? light traffic is simulating 100 users browsing a website, simple http requests. we have 2 backend nodes and after a while, both of them become unavailable. after lowering or stopping traffic, everything goes back to normal. without ipsec, no problem at

haproxy + ipsec -> general socket error

2015-10-16 Thread wbmtfrdlxm
when using ipsec on the backend side, this error pops up in the haproxy log from time to time: Layer4 connection problem, info: "General socket error (No buffer space available) we have tried both strongswan and libreswan, error is still the same. there is nothing strange in the ipsec logs,

RE: haproxy + ipsec -> general socket error

2015-10-16 Thread Lukas Tribus
> when using ipsec on the backend side, this error pops up in the haproxy > log from time to time: > > Layer4 connection problem, info: "General socket error (No buffer space > available) > > > we have tried both strongswan and libreswan, error is still the same. > there is nothing strange

Re: haproxy + ipsec -> general socket error

2015-10-16 Thread Jarno Huuskonen
Hi, On Fri, Oct 16, wbmtfrdlxm wrote: > when using ipsec on the backend side, this error pops up in the haproxy log > from time to time: > > Layer4 connection problem, info: "General socket error (No buffer space > available) We're using ipsec(libreswan) on backend, but I haven't seen any

Re: haproxy + ipsec -> general socket error

2015-10-16 Thread Baptiste
Have you 'tunned' your sysctls? Baptiste Le 16 oct. 2015 14:56, "wbmtfrdlxm" a écrit : > what linux distribution are you using? > > light traffic is simulating 100 users browsing a website, simple http > requests. we have 2 backend nodes and after a while, both of them

Re: haproxy + ipsec -> general socket error

2015-10-16 Thread wbmtfrdlxm
just those 2: net.ipv4.tcp_max_syn_backlog = 8192 net.core.somaxconn = 2048 On Fri, 16 Oct 2015 16:13:31 +0200 Baptistebed...@gmail.com wrote Have you 'tunned' your sysctls? Baptiste Le 16 oct. 2015 14:56, "wbmtfrdlxm" wbmtfrd...@zoho.com a écrit : what linux distribution are