HAProxy publishes the deb packages for HAProxy and AWS-LC libraries on their performance repository.
We can test the behavior and performances of HAProxy 3.2 (LTS) compiled against AWS-LC on Trixie host(s) like cp2041 and cp2042 (T419753)
Roughly:
Prepare for HAProxy 3.2 + OpenSSL 3.5 testing (from haproxy.debian.net)
- Create custom component for trixie
- Manually include haproxy package(s) from haproxy.debian.net
- Install on single (depooled, testing) host (cp2041)
- Check for HAProxy configuration
Prepare for HAProxy 3.2 AWS-LC testing (from haproxy performance repo)
- Create a new component and import haproxy-awslc and libssl-awslc binary packages
- (eventually these can be installed manually on a test host without needing to add new component to aptrepo)
- Install on single (depooled, testing) host (cp2042)
- Check for HAProxy configuration validity (3.0 -> 3.2) and eventual conflicts with OpenSSL libraries for other software
On both hosts:
- Perform synthetic benchmarks
- Pool the host to compare against other ones (Trixie with HAProxy 3.0 and OpenSSL 3.5)
Install on production host
- Include haproxy-awslc and libssl-awslc as component in aptrepo and update them
- Pick a couple of hosts from at least 3 datacenters to test awslc
- cp7001.magru.wmnet
- depool
- merge hiera to use haproxy-awslc
- apply puppet and run basic tests/checks
- repool and check for metric
- cp7009.magru.wmnet
- cp3066.esams.wmnet
- cp3074.esams.wmnet
- cp2043.codfw.wmnet
- cp2044.codfw.wmnet
- cp7001.magru.wmnet
- Results
- Cleanup