<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-mailStijl17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=NL link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>True and false.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>When you dont define to close the connection it will do
keep-alives.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The problem with this is that only the first header of the
stream will be checked against the acl’s.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>If you use haproxy only to load balance between http servers and
not doing routing based on url’s (e.g. send \.(gif|jpg|png|jpeg) to static
server and all else to processing cluster), you may use keep-alives.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Henry<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Van:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Michael Fischer
[mailto:michael@dynamine.net] <br>
<b>Verzonden:</b> woensdag 23 december 2009 1:12<br>
<b>Aan:</b> Henry Paulissen<br>
<b>CC:</b> Joe Williams; varnish-misc@projects.linpro.no<br>
<b>Onderwerp:</b> Re: Slow connections<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>haproxy has never supported keep-alive HTTP connections, to
my knowledge.<o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>--Michael<o:p></o:p></p>
<div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<div>
<p class=MsoNormal>On Tue, Dec 22, 2009 at 3:41 PM, Henry Paulissen <<a
href="mailto:h.paulissen@qbell.nl">h.paulissen@qbell.nl</a>> wrote:<o:p></o:p></p>
<p class=MsoNormal>Next one.<br>
<br>
Did you tune the tcp fin timeout? (on both servers)<br>
Linux will standard holds all connection open till it hits the fin timeout<br>
length (tcp_fin and tcp_fin2).<br>
We decreased it to 3.<br>
<br>
HAProxy support:<br>
Do you forced a http connection close in haproxy?<br>
If all connections are in keep-alive your queue will fill up real quick.<br>
<br>
Henry<br>
<br>
-----Oorspronkelijk bericht-----<br>
Van: Joe Williams [mailto:<a href="mailto:joe@joetify.com">joe@joetify.com</a>]<br>
Verzonden: woensdag 23 december 2009 0:23<br>
Aan: Henry Paulissen<br>
CC: <a href="mailto:varnish-misc@projects.linpro.no">varnish-misc@projects.linpro.no</a><br>
Onderwerp: Re: Slow connections<br>
<br>
<br>
Thanks Henry, nf_conntrack_max is set high on both machines. I've had<br>
the full table issue before :P<o:p></o:p></p>
<div>
<div>
<p class=MsoNormal><br>
<br>
<br>
On 12/22/09 2:58 PM, Henry Paulissen wrote:<br>
> Have a look to the conntrack setting in the kernel (sysctl) on both sides.<br>
> It could be that your conntrack is full (connectrack only exists if you<br>
use<br>
> iptables with netfilter_conntrack).<br>
><br>
> Regards,<br>
> Henry<br>
><br>
> -----Oorspronkelijk bericht-----<br>
> Van: <a href="mailto:varnish-misc-bounces@projects.linpro.no">varnish-misc-bounces@projects.linpro.no</a><br>
> [mailto:<a href="mailto:varnish-misc-bounces@projects.linpro.no">varnish-misc-bounces@projects.linpro.no</a>]
Namens Joe Williams<br>
> Verzonden: dinsdag 22 december 2009 18:12<br>
> Aan: <a href="mailto:varnish-misc@projects.linpro.no">varnish-misc@projects.linpro.no</a><br>
> Onderwerp: Slow connections<br>
><br>
><br>
> I am seeing a good amount (1/100) of connections to varnish (from<br>
> haproxy) taking 3 seconds. My first thought was the connection backlog<br>
> but somaxconn and listen_depth are both set higher than the number of<br>
> connections. Anyone have any suggestions on how to track down what is<br>
> causing this or settings I can use to try to aleviate it?<br>
><br>
> Thanks.<br>
><br>
> -Joe<br>
><br>
><br>
<br>
--<br>
Name: Joseph A. Williams<br>
Email: <a href="mailto:joe@joetify.com">joe@joetify.com</a><br>
Blog: <a href="http://www.joeandmotorboat.com/" target="_blank">http://www.joeandmotorboat.com/</a><br>
<br>
_______________________________________________<br>
varnish-misc mailing list<br>
<a href="mailto:varnish-misc@projects.linpro.no">varnish-misc@projects.linpro.no</a><br>
<a href="http://projects.linpro.no/mailman/listinfo/varnish-misc"
target="_blank">http://projects.linpro.no/mailman/listinfo/varnish-misc</a><o:p></o:p></p>
</div>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>