Re: strange delays with ssl

On Die 17.06.2008 16:50, Micha?? Jaszczyk wrote:
>
>Sorry for not answering quickly, it took me some time to find out all
>the answers to your questions...

No probs, I hope I can help.

>> Which Version of haproxy do you use?
>
>1.3.15.1
>
>> Which Version of stunnel do you use?
>
>I don't use stunnel. I use Haproxy in the TCP layer and forward SSL
>requests to the backends.

Yes, my mistake sorry.

>> On which OS do you use haproxy?
>
>Linux 2.6.18-5-xen-amd64

Do you use it in a virtual machine?

>> haproxy -f YOUR_CONFIG_FILE -Vd

please can you add

option tcplog

to your config

>Available polling systems :
> sepoll : pref=400, test result OK
> epoll : pref=300, test result OK
> poll : pref=200, test result OK
> select : pref=150, test result OK
>Total: 4 (4 usable), will use sepoll.
>Using sepoll() as the polling mechanism.
>00000000:lb.accept(0004)=0006 from [89.78.36.130:57436]
>00000000:lb.srvcls[0006:0007]
>00000000:lb.clicls[0006:0007]
>00000000:lb.srvcls[0006:0007]
>00000000:lb.closed[0006:0007]
>00000001:lb.accept(0004)=0006 from [89.78.36.130:53985]
>00000001:lb.srvcls[0006:0007]
>00000001:lb.clicls[0006:0007]
>00000001:lb.srvcls[0006:0007]
>00000001:lb.closed[0006:0007]
>
>The long delay happens between printing of accept and srvcls.

Every time?

>> Can you send us some entries from the logs, when this happen?
>
>Some example entries from the logs:
>Jun 17 16:43:04 127.0.0.1 haproxy-gr[28084]: 193.0.96.129:38279
>[17/Jun/2008:16:43:04.395]

listener_name lb
server_name lb/grr-4
queue time 0
connecttime 1
total time +1
bytes read +0
termination state --
conn_retries
srv_conn '/' listener_conn '/' process_conn '/' cur_sess 1/1/1/1/0

position in srv_queue / listener_queue 0/0

looks like the connection goes very fast but the response is empty. have you entries in the backendlog?

[snipp]

>Jun 17 16:43:08 127.0.0.1 haproxy-gr[28084]: 193.0.96.129:38291
>[17/Jun/2008:16:43:05.085] lb lb/grr-8 0/2998/+2998 +0 -- 2/2/2/1/0
>0/0

looks like the connection goes very slow (srvtimeout) and the response is empty. have you entries in the backendlog?

This setup works?!

Cheers

Aleks Received on 2008/06/17 22:49