Conversation

Notices

1. Kushal Das :python: :tor: (kushal@toots.dgplug.org)'s status on Saturday, 22-Feb-2025 22:43:36 JST Kushal Das :python: :tor:

   Who are the #HAProxy experts in my timeline?

   • :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse: (selea@social.linux.pizza)'s status on Saturday, 22-Feb-2025 22:43:31 JST :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:

     in reply to

     • maswan

     @kushal

     If you could describe the performance issues you are having, it would be easier to point you in the right direction :)

     @maswan

   • Kushal Das :python: :tor: (kushal@toots.dgplug.org)'s status on Saturday, 22-Feb-2025 22:43:33 JST Kushal Das :python: :tor:

     in reply to

     • maswan

     @maswan I am digging into performance tuning , so I need to find hidden knowledge :)

   • maswan (maswan@mastodon.acc.sunet.se)'s status on Saturday, 22-Feb-2025 22:43:34 JST maswan

     in reply to

     @kushal
     We run it at work and are often surprised at behavior with a really simple setup, so, ehm, not me.

   • :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse: (selea@social.linux.pizza)'s status on Sunday, 23-Feb-2025 06:02:06 JST :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:

     in reply to

     • maswan
     • Tutiluren

     @n

     Yeah HAProxy is great, versatily and great performance,

     @kushal @maswan

   • Tutiluren (n@mastodon.nu)'s status on Sunday, 23-Feb-2025 06:02:07 JST Tutiluren

     in reply to

     • :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:
     • maswan

     @selea @kushal @maswan

     I run it casually on my home server. I use it as a reverse proxy only, redirecting traffic based on the TLS hello, so that haproxy itself does not actually need to run any encryption nor any actual http handling.

     Bonus with this setup is that I can serve plenty of domains from the same IP without also sharing certificates. This means I can renew them independently and the cert does not leak what other domains are hosted on the same machine.

   • :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse: (selea@social.linux.pizza)'s status on Sunday, 23-Feb-2025 18:22:22 JST :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:

     in reply to

     • maswan

     @kushal @maswan

     HTTP or TCP?

   • Kushal Das :python: :tor: (kushal@toots.dgplug.org)'s status on Sunday, 23-Feb-2025 18:22:23 JST Kushal Das :python: :tor:

     in reply to

     • :debian: 𝚜𝚎𝚕𝚎𝚊 :opensuse:
     • maswan

     @selea @maswan HAProxy is taking all the CPUs (4 in a vm) and doing around 1200 requests/sec, the backend can locally do 23k req/sec. If I enable caching in HA, then I can push to max 2700-2800 req/sec. I am wondering if I can push it more.