News for hackers. Stuff that matters.

A comment on How we fine-tuned HAProxy to achieve 2M concurrent SSL connections (2017). Parent comment

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by Florin_Andrei on Friday January 11, 2019 @02:44PM (#18886231)
> TCP connections are basically identified with an (ip, port) tuple.

I believe the full identifier is a quad: (source ip, source port, dest ip, dest port).

[ Parent | on HN ]
Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by mrkstu on Friday January 11, 2019 @03:12PM (#18886495)
Also note that DNS will load balance the IP presented. For instance 'dig'ing yahoo.com gives me the following:

  ;; ANSWER SECTION:
  yahoo.com.		92	IN	A	72.30.35.9
  yahoo.com.		92	IN	A	98.138.219.231
  yahoo.com.		92	IN	A	72.30.35.10
  yahoo.com.		92	IN	A	98.137.246.7
  yahoo.com.		92	IN	A	98.138.219.232
  yahoo.com.		92	IN	A	98.137.246.8
So you can now multiple the quad by the number of public IPs you load up into your DNS record.
[ Parent | on HN ]