Re: HAProxy performance on OpenBSD

2023-01-23 Thread Marc West
On 2023-01-23 07:58:24, Willy Tarreau wrote: > Hi Marc, Hi Willy, Thanks for your reply and all of your work on haproxy! > I think you should try to flood the machine using UDP traffic to see > the difference between the part that happens in the network stack and > the part that happens in the

HAProxy performance on OpenBSD

2023-01-22 Thread Marc West
Hi, We have been running HAProxy on OpenBSD for serveral years (currently OpenBSD 7.2 / HAProxy 2.6.7) and everything has been working perfect until a recent event of higher than normal traffic. It was an unexpected flood to one site and above ~1100 cur sessions we started to see major impacts to

Re: HAProxy performance on OpenBSD

2023-01-24 Thread Marc West
On 2023-01-24 06:58:57, Willy Tarreau wrote: > Hi Marc, Hi Willy, > See the difference ? There seems to be an insane FD locking cost on this > system that simply wastes 40% of the CPU there. So I suspect that in your > first tests you were stressing the locking while in the last ones you > were

Re: HAProxy performance on OpenBSD

2023-01-24 Thread Marc West
On 2023-01-24 23:04:14, Olivier Houchard wrote: > On Tue, Jan 24, 2023 at 11:05:37PM +0100, Willy Tarreau wrote: > > On Tue, Jan 24, 2023 at 02:15:08PM -0600, Marc West wrote: > > > > Stupid question but I prefer to ask in order to be certain, are all of > > &

Re: Transparent proxy issue on FreeBSD

2023-03-06 Thread Marc West
Hi Stefan and thanks for your replies. (Sorry for the late reply and replying to my own mail, I don't seem to be receiving messages from the list after confirming the subscription twice and noticed your replies when checking the archives.) > when I understand you correct then you have

Re: Transparent proxy issue on FreeBSD

2023-03-07 Thread Marc West
On 2023-03-07 08:09:04, Rainer Duffner wrote: > I admit I only toyed with TP, so I really don???t know what I???m doing > there, but: > > Have you tried to just use pfSense for this? The developer of the package > (https://github.com/PiBa-NL) seemed to be active here, but I haven???t seen >

100% CPU after config reload on 2.6.10/2.6.11

2023-03-24 Thread Marc West
Hi, I saw in the 2.6.10 release notes to report any issues that seem like they could be related to the concurrency changes. When reloading config on 2.6.10 or 2.6.11 on FreeBSD 13.1-RELEASE the old process does not exit and starts to use 100%+ CPU. This does not happen on 2.6.9 with the same

Re: 100% CPU after config reload on 2.6.10/2.6.11

2023-03-26 Thread Marc West
On 2023-03-26 07:19:18, Willy Tarreau wrote: > I could finally reproduce it, figure the cause and the fix. The 2.6 > backport is missing this patch for evports and kqueue: > > 698342635 BUG/MAJOR: poller: drop FD's tgid when masks don't match > > I could verify that it fixes the problem.

Transparent proxy issue on FreeBSD

2023-02-17 Thread Marc West
Hi, After my other thread about performance issues on OpenBSD we decided to switch OSes on our HAProxy boxes to FreeBSD 13.1. In the test environment everything worked perfectly with transparent proxying but when cutting production over to FreeBSD I ran into an issue and had to revert for now.