Re: cttproxy performance drop?

Hi JF,

On Fri, Jun 20, 2008 at 04:09:41PM +0800, Jeffrey 'jf' Lim wrote:
> hi guys, I'm sort of looking into using haproxy, but with cttproxy in
> order to get the lb to be in front of the machines that are going to
> be load-balanced. Havent done too much testing yet, but I saw an old
> post that claims that the patch drops performance by about 30%, and
> was wondering if the list was getting the same thing, or if the
> performance has changed a fair bit in recent years. Could somebody
> provide some much appreciated feedback regarding updated versions of
> the patch + kernel?
>
> The posts where I found this mentioned performance drop:
> - http://www.formilux.org/archives/haproxy/0711/0217.html
> - https://lists.balabit.hu/pipermail/tproxy/2006-August/000301.html
> - (this one November 2007)
> http://www.formilux.org/archives/haproxy/0711/0160.html

It's not cttproxy per-se which causes the performance drop, but ip_conntrack. If you already have ip_conntrack loaded and are satisfied with the performance, then you shouldn't worry. But if you currently don't use ip_conntrack on the machine, then you may have a big surprize after loading it :-/

Willy Received on 2008/06/25 06:57