Possible Lua Memory Leak

2017-04-25 Thread Philip Seidel
Possible Lua Memory Leak? We are running HAProxy version 1.7.2 (also tested 1.7.5) and are loading a Lua file which makes use of 2 actions. The first action is called on http-request and the second on http-response. In the simple test case we put together the request action stores some data in

Re: Syntax to capture tcp-request content? How to access the captured data later?

2017-04-25 Thread Swapnil Dubey
Hi Christian, I had the similar requirement and I had to add the following statement in order to make it work. I have put comment on the top of each statement. *# Acl to make haproxy wait till enough information is received from client to intercept and route* * acl client_wait req_len

Re: Syntax to capture tcp-request content? How to access the captured data later?

2017-04-25 Thread Swapnil Dubey
Just to make it clear that my answer is to solve the problem similar to what you mentioned in the link w.r.t mqtt. If you problem is different from that then it might not work. On Tue, Apr 25, 2017 at 10:59 PM, Swapnil Dubey wrote: > Hi Christian, > > I had the similar

Syntax to capture tcp-request content? How to access the captured data later?

2017-04-25 Thread Christian Rohmann
Hello haproxy users! I am trying to get my head around the feature to capture arbitrary tcp-request content. (I've already found a previous thread - http://haproxy.formilux.narkive.com/dwcoXP7y/haproxy-with-mqtt where someone asked a something similar to extract data from MQTT requests) In

Re: HAProxy for Centos 7

2017-04-25 Thread Andrew Smalley
Hello Manojkumar I see you have requested haproxy 1.6 for CentOS 7 as you dont have root access. It is possible to configure and build in your own home directory, however without root access you will not be able to start it as a non privileged user and use ports below 1024 as this requires root

Re: OpenSSL engine and async support

2017-04-25 Thread Grant Zhang
Hi Emeric, > On Apr 25, 2017, at 04:03, Emeric Brun wrote: > > Hi Grant, > > On 04/10/2017 05:16 PM, Grant Zhang wrote: >> >>> On Apr 10, 2017, at 07:42, Emeric Brun wrote: >>> >> * openssl version (1.1.0b-e?) >>> compiled 1.1.0e >>>

Re: Haproxy 1.5.4 unable to accept new TCP request, backlog full, tens of thousands close_wait connection

2017-04-25 Thread jaseywang
yes, really permission issue, here is the gmon.out file: https://www.dropbox.com/s/c5wq7oxdjw0ddj0/gmon.out?dl=0 not sure how this happen: # gprof /usr/sbin/haproxy /var/lib/haproxy/gmon.out gprof: file `/usr/sbin/haproxy' has no symbols # gprof haproxy /var/lib/haproxy/gmon.out haproxy: No

Re: Haproxy 1.5.4 unable to accept new TCP request, backlog full, tens of thousands close_wait connection

2017-04-25 Thread Willy Tarreau
On Tue, Apr 25, 2017 at 02:26:53PM +0800, jaseywang wrote: > yes, really permission issue, here is the gmon.out file: > https://www.dropbox.com/s/c5wq7oxdjw0ddj0/gmon.out?dl=0 I can't do anything from it since it's specific to your executable. > not sure how this happen: > # gprof

Re: Haproxy 1.5.4 unable to accept new TCP request, backlog full, tens of thousands close_wait connection

2017-04-25 Thread Willy Tarreau
On Tue, Apr 25, 2017 at 03:32:16PM +0800, jaseywang wrote: > Here is the analytics data, dropbox link: > https://www.dropbox.com/s/rn92z42ao5l5rdo/analytics.txt?dl=0 Thank you. Well, everything there looks pretty good, with low CPU usage everywhere and normal number of calls for each function.

Re: Haproxy 1.5.4 unable to accept new TCP request, backlog full, tens of thousands close_wait connection

2017-04-25 Thread Willy Tarreau
On Tue, Apr 25, 2017 at 05:00:48PM +0800, jaseywang wrote: > Here is the data with debug mode off, still the same issue: > https://www.dropbox.com/s/4x0cjfv1o2kmwg3/analytics-debug-off.txt?dl=0 > > > Flat profile: > > Each sample counts as 0.01 seconds. > no time accumulated > > %

Re: Haproxy 1.5.4 unable to accept new TCP request, backlog full, tens of thousands close_wait connection

2017-04-25 Thread jaseywang
Awesome! It seems it's really something related with SSL handshakes, We open 80 port without https and let cdn connect to our 80 port, everything seems fine. I'll update this thread laters. On Tue, Apr 25, 2017 at 5:23 PM, Willy Tarreau wrote: > On Tue, Apr 25, 2017 at 05:00:48PM

Re: OpenSSL engine and async support

2017-04-25 Thread Emeric Brun
Hi Grant, On 04/10/2017 05:16 PM, Grant Zhang wrote: > >> On Apr 10, 2017, at 07:42, Emeric Brun wrote: >> > >>> * openssl version (1.1.0b-e?) >> compiled 1.1.0e >>> >>> >> Could you provide patches rebased on current dev master branch? > I am kinda busy with other project

HAProxy for Centos 7

2017-04-25 Thread Manojkumar Gupta
Hello, Please can you share the binary compiled copy of HAProxy for Centos 7, v1.6 or above. I don’t have root access and when using generic platform there are multiple packages that I need as dependency and without root its hard to get it compiled from source. I appreciate your help in