Re: 503 errors when services available and other connections succeed to same service during failure window

2010-08-02 Thread Jerry Champlin
Willy: iptables is enabled on the load balancer as it also serves as part of a firewall pair for the environment. I just noticed that conntrack is also enabled on the backend servers. Could these tables be filling up and causing the resets? There are none of the usual errors from conntrack in d

Re: 503 errors when services available and other connections succeed to same service during failure window

2010-08-02 Thread Willy Tarreau
On Mon, Aug 02, 2010 at 01:11:48AM -0600, Jerry Champlin wrote: > Willy: > > iptables is enabled on the load balancer as it also serves as part of a > firewall pair for the environment. I just noticed that conntrack is also > enabled on the backend servers. Could these tables be filling up and >

Re: 503 errors when services available and other connections succeed to same service during failure window

2010-08-02 Thread Jerry Champlin
Willy: On the load balancer we have iptables rate limits on ssh connections only. I have removed iptables and netfilter entirely on the server side to ensure that resets are not coming from iptables. I can watch the resets on the app server and see them increasing steadily and incrementing faste

Re: 503 errors when services available and other connections succeed to same service during failure window

2010-08-02 Thread Willy Tarreau
On Mon, Aug 02, 2010 at 02:43:30AM -0600, Jerry Champlin wrote: > Willy: > > On the load balancer we have iptables rate limits on ssh connections only. > I have removed iptables and netfilter entirely on the server side to ensure > that resets are not coming from iptables. I can watch the resets

Re: 503 errors when services available and other connections succeed to same service during failure window

2010-08-02 Thread Jerry Champlin
On inspection, Keepalive is off on the server side so that's definitely not it. > And you're absolutely sure that the app can't cause an apache process crash > from time to time ? > The app could be causing the problem. We are running in multi-process instead of multi-thread mode and we're lig

Can haproxy redirect instead of passthrough to backend?

2010-08-02 Thread Rich Rauenzahn
I'm using haproxy ("balance uri") inside an intranet to direct traffic to 4 squid servers in order to cache content normally served directly by our web server. This web server serves large files (ranging from 10's of MB to several GB) I'm worried that our haproxy server could be a network bottle

Re: Can haproxy redirect instead of passthrough to backend?

2010-08-02 Thread Alexandre Snarskii
On Mon, Aug 02, 2010 at 09:05:02AM -0700, Rich Rauenzahn wrote: > I'm using haproxy ("balance uri") inside an intranet to direct traffic > to 4 squid servers in order to cache content normally served directly > by our web server. This web server serves large files (ranging from > 10's of MB to se

Re: List of sites using haproxy ?

2010-08-02 Thread Alexandre Snarskii
On Fri, Jul 30, 2010 at 03:14:00PM +0200, Willy Tarreau wrote: > > [1] a few URLs indicating what some sites are using : > whos.amung.us: http://whos.amung.us/acknowledgements/ > stackoverflow: > http://blog.stackoverflow.com/2010/01/stack-overflow-network-configuration/ > reddit: http://code.red

Re: List of sites using haproxy ?

2010-08-02 Thread Willy Tarreau
On Mon, Aug 02, 2010 at 11:16:42PM +0400, Alexandre Snarskii wrote: > On Fri, Jul 30, 2010 at 03:14:00PM +0200, Willy Tarreau wrote: > > > > [1] a few URLs indicating what some sites are using : > > whos.amung.us: http://whos.amung.us/acknowledgements/ > > stackoverflow: > > http://blog.stackover

Re: List of sites using haproxy ?

2010-08-02 Thread Craig
at 02.08.2010 21:16, schrieb Alexandre Snarskii: [...] > PS: and, one more note: what I see in this mailing list is the much > better support than I getting from our load balancer vendor. > Thanks once more :) You have the choice: http://www.exceliance.fr/ahlandingen.htm https://www.paypal.c

HAProxy Setup not talking to Passenger/Apache

2010-08-02 Thread Nick Hilem
I have HAProxy, 1.3.15, on the frontend of a few Ubuntu 9.04 instances with the following haproxy.cfg that are distributing to a couple apache/passenger instances. My problem is that if I... curl http://localhost/ It sits for awhile then returns a 504 Gateway Timeout. However if I... curl http:

Re: Can haproxy redirect instead of passthrough to backend?

2010-08-02 Thread Willy Tarreau
Hi, On Mon, Aug 02, 2010 at 09:05:02AM -0700, Rich Rauenzahn wrote: > I'm using haproxy ("balance uri") inside an intranet to direct traffic > to 4 squid servers in order to cache content normally served directly > by our web server. This web server serves large files (ranging from > 10's of MB

Re: clarification of CD termination code

2010-08-02 Thread Willy Tarreau
On Wed, Jul 28, 2010 at 05:51:18PM -0700, Bryan Talbot wrote: > I'm trying to figure out what _exactly_ the CD termination code means. The > docs says: > > CD The client unexpectedly aborted during data transfer. This can be > caused by a browser crash, by an intermediate equipme

Re: HAProxy Setup not talking to Passenger/Apache

2010-08-02 Thread Willy Tarreau
Hi Nick, On Mon, Aug 02, 2010 at 11:13:29PM -0500, Nick Hilem wrote: > I have HAProxy, 1.3.15, on the frontend of a few Ubuntu 9.04 instances with > the following haproxy.cfg that are distributing to a couple apache/passenger > instances. My problem is that if I... > curl http://localhost/ > It