How we fine-tuned HAProxy to achieve 2M concurrent SSL connections (2017)

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by LinuxBender on Friday January 11, 2019 @01:19PM (#18885544)

To further clarify, even if you only had 1 host behind a proxy, you can create multiple listeners for that application on different ports or IP's. I do this for a few of my servers to avoid fin-wait / time-wait assassination attacks.

i.e. have apache listen on 127.0.0.* and set up ifcfg-lo-range with

    IPADDR_START=127.0.0.10
    IPADDR_END=127.0.0.99
    PREFIX=8
    CLONENUM_START=10

Or have the server behind haproxy listen on a few hundred ports.

[ Parent | on HN ]

There are no comments on this comment yet.