Re: strange delays with ssl

From: Michał Jaszczyk <jasiu85#gmail.com>
Date: Wed, 18 Jun 2008 11:36:36 +0200


>> Linux 2.6.18-5-xen-amd64
>
> Do you use it in a virtual machine?

Yes, it's a Xen. Does it matter to Haproxy?

> please can you add
>
> option tcplog
>
> to your config

Added. Here are example logs that I get now:

Jun 18 11:27:48 127.0.0.1 haproxy-gr[24603]: 89.78.36.130:36016
[18/Jun/2008:11:27:45.391] lb lb/grr-1 0/0/3091 1617 -- 0/0/0/0/0 0/0
Jun 18 11:27:51 127.0.0.1 haproxy-gr[24603]: 89.78.36.130:36018
[18/Jun/2008:11:27:48.593] lb lb/grr-2 0/0/3086 1617 -- 0/0/0/0/0 0/0
Jun 18 11:27:54 127.0.0.1 haproxy-gr[24603]: 89.78.36.130:36020
[18/Jun/2008:11:27:51.783] lb lb/grr-3 0/0/3076 1617 -- 0/0/0/0/0 0/0

And here is what I get when connecting from another computer (this time everything seems to be fine):

Jun 18 11:35:37 127.0.0.1 haproxy-gr[24603]: 193.0.96.129:40326
[18/Jun/2008:11:35:37.419] lb lb/grr-1 0/0/0 1617 -- 0/0/0/0/0 0/0
Jun 18 11:35:37 127.0.0.1 haproxy-gr[24603]: 193.0.96.129:40328
[18/Jun/2008:11:35:37.725] lb lb/grr-2 0/0/0 1617 -- 0/0/0/0/0 0/0
Jun 18 11:35:37 127.0.0.1 haproxy-gr[24603]: 193.0.96.129:40330
[18/Jun/2008:11:35:37.419] lb lb/grr-3 0/0/493 1617 -- 0/0/0/0/0 0/0


>> 00000001:lb.accept(0004)=0006 from [89.78.36.130:53985]
>> 00000001:lb.srvcls[0006:0007]
>> 00000001:lb.clicls[0006:0007]
>> 00000001:lb.srvcls[0006:0007]
>> 00000001:lb.closed[0006:0007]
>>
>> The long delay happens between printing of accept and srvcls.
>
> Every time?

Yes, every time.

>> Jun 17 16:43:08 127.0.0.1 haproxy-gr[28084]: 193.0.96.129:38291
>> [17/Jun/2008:16:43:05.085] lb lb/grr-8 0/2998/+2998 +0 -- 2/2/2/1/0
>> 0/0
>
> looks like the connection goes very slow (srvtimeout) and the response
> is empty. have you entries in the backendlog?

Hard to say, but I'm sure I got the response I was expecting.

> This setup works?!

What do you mean? :) It works, i.e. I get exactly the responses I'm expecting and I get them every time. It's just that delay...

>
> Cheers
>
> Aleks
>
>
Received on 2008/06/18 11:36

This archive was generated by hypermail 2.2.0 : 2008/06/18 11:45 CEST