| Vgutierrez | |
| Dec 1 2021, 7:05 PM |
| F34812170: image.png | |
| Dec 2 2021, 6:05 PM |
The issue has been reported to upstream on https://github.com/haproxy/haproxy/issues/1472 (details can be found on the GitHub issue)
Please note that even if connection reuse is non existent on cp3064 during EU daytime it doesn't seem to impact negatively HAProxy/varnish performance (we used to run nginx without connection reuse with varnish successfully after all)
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| haproxy:tls_terminator: Increase maxconn to 200k | operations/puppet | production | +2 -2 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Vgutierrez | T290005 Test haproxy as a WMF's CDN TLS terminator with real traffic | |||
| Resolved | Vgutierrez | T296874 HAProxy fails to reuse connections under some conditions |
Mentioned in SAL (#wikimedia-operations) [2021-12-02T17:51:21Z] <vgutierrez> puppet disabled on cp3064 to manually increase number of maxconns in HAProxy - T296874
As pointed out by Willy Tarreau on https://github.com/haproxy/haproxy/issues/1472#issuecomment-984745445 it's a matter of FD usage and increasing maxconn seems to solve it:
Change 743221 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] haproxy:tls_terminator: Increase maxconn to 200k
Change 743221 merged by Vgutierrez:
[operations/puppet@production] haproxy:tls_terminator: Increase maxconn to 200k
Mentioned in SAL (#wikimedia-operations) [2021-12-02T18:19:29Z] <vgutierrez> re-enable puppet on cp3064 - T296874