Re: HAproxy constant memory leak

2015-02-05 Thread Willy Tarreau
Hi Georges-Etienne, On Thu, Feb 05, 2015 at 09:10:25PM -0500, Georges-Etienne Legendre wrote: Hi Willy, I'm not sure how to document this leak. I don't know exactly how is implemented the firewall SSL health check... Would the Wireshark trace be enough to report the issue? Yes I think it

Re: [PATCH 0/2] Allow suppression of email alerts by log level

2015-02-05 Thread Willy Tarreau
Hi Simon, On Fri, Feb 06, 2015 at 11:11:55AM +0900, Simon Horman wrote: Hi, This series adds a new option which allows configuration of the maximum log level of messages for which email alerts will be sent. (...) Great! Both patches applied. Thanks! Willy

Re: SSL Performance increase?

2015-02-05 Thread Shawn Heisey
On 2/5/2015 5:54 AM, Klavs Klavsen wrote: Adding nbproc 4, improved performance of https from 511 req/s to 1296 req/s.. not quite an exponential scaling.. We tested with 8 cores and got 1328 req/s.. so it seems we're hitting something else already after 2,5 core.. vmstat 1 - also

Re: SSL Performance increase?

2015-02-05 Thread Jarno Huuskonen
Hi, On Thu, Feb 05, Klavs Klavsen wrote: Jarno Huuskonen wrote on 02/05/2015 01:28 PM: Hi, On Thu, Feb 05, Klavs Klavsen wrote: Hi guys, I'm testing our haproxy setup in regards to SSL performance - by simply using ab, and fetching a favicon.ico file.. over http haproxy delivers

Re: SSL Performance increase?

2015-02-05 Thread Klavs Klavsen
Adding nbproc 4, improved performance of https from 511 req/s to 1296 req/s.. not quite an exponential scaling.. We tested with 8 cores and got 1328 req/s.. so it seems we're hitting something else already after 2,5 core.. vmstat 1 - also reveals a lot of cpu-idle time.. Jarno Huuskonen

nbproc 1 and stats in ADMIN mode?

2015-02-05 Thread Klavs Klavsen
Hi guys, Just to check.. if I set nbproc to f.ex. 4 - then I understand I need to define 4xstats.. and when I visit the webinterface.. I'll actually only get stats from one of the 4 processes.. But we have ADMIN enabled for stats - so we can disable backend servers etc.. will we have to do

Re: SSL Performance increase?

2015-02-05 Thread Klavs Klavsen
Jarno Huuskonen wrote on 02/05/2015 01:28 PM: Hi, On Thu, Feb 05, Klavs Klavsen wrote: Hi guys, I'm testing our haproxy setup in regards to SSL performance - by simply using ab, and fetching a favicon.ico file.. over http haproxy delivers 3.000 req/s. over https haproxy delivers 511 req/s.

Re: SSL Performance increase?

2015-02-05 Thread Klavs Klavsen
Baptiste wrote on 02/05/2015 04:44 PM: [CUT] 3000 req/s in clear is low and a so rounded number is not normal :) Move (far far) away from this provider. You're wasting your time investigating perfomance issue while the limitation is in the hypervisor and multitenancy of your supplier. it's

Re: SSL Performance increase?

2015-02-05 Thread Baptiste
On Thu, Feb 5, 2015 at 2:03 PM, Jarno Huuskonen jarno.huusko...@uef.fi wrote: Hi, On Thu, Feb 05, Klavs Klavsen wrote: Jarno Huuskonen wrote on 02/05/2015 01:28 PM: Hi, On Thu, Feb 05, Klavs Klavsen wrote: Hi guys, I'm testing our haproxy setup in regards to SSL performance - by

Re: nbproc 1 and stats in ADMIN mode?

2015-02-05 Thread Tait Clarridge
On Thu, Feb 5, 2015 at 3:44 PM, Pavlos Parissis pavlos.paris...@gmail.com wrote: On 05/02/2015 03:01 μμ, Klavs Klavsen wrote: Hi guys, Just to check.. if I set nbproc to f.ex. 4 - then I understand I need to define 4xstats.. and when I visit the webinterface.. I'll actually only get stats

tcp-response inspect-delay with WAIT_END

2015-02-05 Thread Chris
Hello, We have some complex logic in our application that will at times determine that the response to a specific query should be delayed. Currently this is handled in the application with a short (~100ms) sleep. We would like to move this delay in response to the load balancer. I have tried

Re: HAProxy backend server AWS S3 Static Web Hosting

2015-02-05 Thread Pavlos Parissis
On 03/02/2015 02:02 πμ, Thomas Amsler wrote: Hello, Is it possible to front AWS S3 Static Web Hosting with HAProxy? I have tried to setup a backend to proxy requests to SomeHost.s3-website-us-east-1.amazonaws.com:80 http://SomeHost.s3-website-us-east-1.amazonaws.com:80. But I am getting an

Re: Global ACLs

2015-02-05 Thread Pavlos Parissis
On 02/02/2015 05:31 μμ, Willy Tarreau wrote: Hi Christian, [...snip...] We've been considering this for a while now without any elegant solution. Recently while discussing with Emeric we got an idea to implement scopes, and along these lines I think we could instead try to inherit ACLs

Re: SSL Performance increase?

2015-02-05 Thread Baptiste
On Thu, Feb 5, 2015 at 4:54 PM, Klavs Klavsen k...@vsen.dk wrote: Baptiste wrote on 02/05/2015 04:44 PM: [CUT] 3000 req/s in clear is low and a so rounded number is not normal :) Move (far far) away from this provider. You're wasting your time investigating perfomance issue while the

Re: Help haproxy

2015-02-05 Thread Yuan Long
Do you have the words option forward for in your config. http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#option%20forwardfor Can you copy/paste your config (without sensitive info if needed). Regards, Long

Setting uuid cookies not for sticky sessions

2015-02-05 Thread Alberto
I have multiple back ends using different stacks. All I need is to ensure that every client gets a unique cookie. They don't need to be used for sticky sessions. Pretty much all the examples I find are for hard coding, prefixing and/or for sticky session purposes. Is there a way to get haproxy

Interpreting ttime, rtime friends correctly

2015-02-05 Thread Conrad Hoffmann
Hello everybody, I have wondered this several times before and searched the mailing list to no avail, so I thought I'd just go ahead and ask: Can somebody shed some more light on how to read the ttime metric that haproxy supplies? I am confident I understand qtime, ctime and rtime, but at least

Re: SSL Performance increase?

2015-02-05 Thread Dennis Jacobfeuerborn
On 05.02.2015 20:09, Baptiste wrote: On Thu, Feb 5, 2015 at 4:54 PM, Klavs Klavsen k...@vsen.dk wrote: Baptiste wrote on 02/05/2015 04:44 PM: [CUT] 3000 req/s in clear is low and a so rounded number is not normal :) Move (far far) away from this provider. You're wasting your time

Re: SSL Performance increase?

2015-02-05 Thread Jarno Huuskonen
Hi, On Thu, Feb 05, Klavs Klavsen wrote: Hi guys, I'm testing our haproxy setup in regards to SSL performance - by simply using ab, and fetching a favicon.ico file.. over http haproxy delivers 3.000 req/s. over https haproxy delivers 511 req/s. I tried giving haproxy more cores (it's

Re: HAproxy constant memory leak

2015-02-05 Thread Georges-Etienne Legendre
Hi Willy, I'm not sure how to document this leak. I don't know exactly how is implemented the firewall SSL health check... Would the Wireshark trace be enough to report the issue? Thanks! -- Georges-Etienne On Tue, Feb 3, 2015 at 5:52 PM, Willy Tarreau w...@1wt.eu wrote: Hi Georges-Etienne,

[PATCH 2/2] MEDIUM: Allow suppression of email alerts by log level

2015-02-05 Thread Simon Horman
This patch adds a new option which allows configuration of the maximum log level of messages for which email alerts will be sent. The default is alert which is more restrictive than the current code which sends email alerts for all priorities. That behaviour may be configured using the new

[PATCH 0/2] Allow suppression of email alerts by log level

2015-02-05 Thread Simon Horman
Hi, This series adds a new option which allows configuration of the maximum log level of messages for which email alerts will be sent. The default is alert which is more restrictive than the current code which sends email alerts for all priorities. That behaviour may be configured using the new

[PATCH 1/2] LOW: Remove trailing '.' from email alert messages

2015-02-05 Thread Simon Horman
This removes the trailing '.' from both the header and the body of email alerts. The main motivation for this change is to make the format of email alerts generated from srv_set_stopped() consistent with those generated from set_server_check_status(). Signed-off-by: Simon Horman

[SPAM] Jusqu'à moins 60 pour cent sur tout le site

2015-02-05 Thread Chemises et Chemisiers en coton par lpmd-access
Title: Newsletter - OZOA-chemises.com Consulter la version en ligne CHEMISES HOMME CINTREES | CHEMISES HOMME DROITES | CHEMISIERS FEMME CINTRES | CHEMISIERS FEMME DROITS GAGNEZ DU TEMPS ET ACCEDEZ DIRECTEMENT AUX MODELES DISPONI BLES DANS VOTRE TAILLE : Dtail de l'offre :

Re: [PATCH/RFC 0/8] Email Alerts

2015-02-05 Thread Pavlos Parissis
On 04/02/2015 01:26 πμ, Simon Horman wrote: On Tue, Feb 03, 2015 at 05:13:02PM +0100, Baptiste wrote: On Tue, Feb 3, 2015 at 4:59 PM, Pavlos Parissis pavlos.paris...@gmail.com wrote: On 01/02/2015 03:15 μμ, Willy Tarreau wrote: Hi Simon, On Fri, Jan 30, 2015 at 11:22:52AM +0900, Simon

Re: HAProxy 1.5.10 on FreeBSD 9.3 - status page questions

2015-02-05 Thread Pavlos Parissis
On 04/02/2015 11:38 πμ, Tobias Feldhaus wrote: Hi, To refresh the page did not help (the number of seconds the PRIMARY backend was considered to be down increased continuously, but not the number of Bytes or the color). [deploy@haproxy-tracker-one /var/log] /usr/local/sbin/haproxy -vv

Re: nbproc 1 and stats in ADMIN mode?

2015-02-05 Thread Pavlos Parissis
On 05/02/2015 03:01 μμ, Klavs Klavsen wrote: Hi guys, Just to check.. if I set nbproc to f.ex. 4 - then I understand I need to define 4xstats.. and when I visit the webinterface.. I'll actually only get stats from one of the 4 processes.. But we have ADMIN enabled for stats - so we can