Hi John,
The rationale for choosing source (and cookies for non-passthrough
routes) was to allow for sticky sessions
to the same backend.
I can see this breaking down with requests being routed via an external
balancer, so there's benefit
to the point to having this be tunable. I added a trello card for this:
https://trello.com/c/rKf0HoHx/235-make-template-haproxy-router-balancing-tunable#
For now, the workaround would be to use a customized haproxy template
and set the config/balancing algorithm
appropriately.
For more details, see:
https://docs.openshift.com/enterprise/3.2/install_config/install/deploy_router.html#deploying-a-customized-haproxy-router
Thanks,
Ram//
On Fri, May 20, 2016 at 5:13 AM, Skarbek, John <[email protected]> wrote:
> Good Morning,
>
> We have an application which terminates their own SSL, therefore we
> utilize TLS passthrough in the route configuration. This is our preferred
> method of communicating with this particular application. This enforces
> haproxy to operate using tcp mode, which the balance method is hard coded
> to source [1].
>
> The problems comes in that we’ve got a front door to openshift, so all
> traffic hits a load balancer external to openshift. Due to the source
> reading the IP of that external loadbalancer, all traffic gets routed to
> the same pod.
>
> Looking through various PR’s and commits I cannot find the reason why
> source was chosen, but did see where last year, there was a glimpse of
> this being touched later on. Would anyone be able to share why this
> particular balance type was chosen? roundrobin seems like a better choice
> for us in our particular situation. I also feel like having an external
> load balancer to openshift is not uncommon and would love to see this be
> configurable.
>
> - [1]
>
> https://github.com/openshift/origin/blob/master/images/router/haproxy/conf/haproxy-config.template#L237-L242
> - [2]
> https://cbonte.github.io/haproxy-dconv/configuration–1.5.html#balance
>
>
>
> --
> John Skarbek
>
>
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
>
--
Ram//
main(O,s){s=--O;10<putchar(3^O?97-(15&7183>>4*s)*(O++?-1:1):10)&&\
main(++O,s++);}
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
