How we fine-tuned HAProxy to achieve 2M concurrent SSL connections (2017)

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by zokier on Friday January 11, 2019 @03:04PM (#18886431)

Aren't TCP connections more accurately identified by (srcip, srcport, dstip, dstport) tuple? This is somewhat significant as you can easily have tons of IPs in a single box.

[ Parent | on HN ]

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by guiambros on Saturday January 12, 2019 @01:16AM (#18890005)

Yes, but after the initial syn/ack, the daemon will allocate an outgoing port number for the connection. So if you have a single IP address and a burst with hundred of thousands of requests, you will run into problems..

[ Parent | on HN ]

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by chmod775 on Saturday January 12, 2019 @04:34AM (#18890464)

Yes, but local port and IP are usually fixed when running a HTTP server (unless you're binding to multiple IPs on one machine).

[ Parent | on HN ]

Re:How we fine-tuned HAProxy to achieve 2M concurrent SSL co... by toredash on Saturday January 12, 2019 @01:12AM (#18889985)

Correct

[ Parent | on HN ]