Conversation

Notices

1. Embed this notice
   Tim W RESISTS (tim@union.place)'s status on Thursday, 12-Oct-2023 07:09:57 JST Tim W RESISTS

   in reply to

   • Bálint Szilakszi

   @szbalint what's funny is that (years ago) even hardware load balancers like F5's products didn't actually do these things correctly natively and you had to go in and optimize them yourself. When that was literally the intended value-add of the specialized product.

   It's amazing to me how bad the tech industry is at some of these things.

   • Embed this notice
     Bálint Szilakszi (szbalint@x0r.be)'s status on Thursday, 12-Oct-2023 07:09:58 JST Bálint Szilakszi

     Assuming that people have deployed eg HAProxy, there are like a dozen different timeout options that you can specify to deal with edge cases.

     When you have enough clients those edge cases start to matter quite a lot.

     So assuming you’ve configured all those timeouts in HAProxy, are you safe?

     No. What HAProxy docs do not sufficiently emphasize is that you need to set a bunch of kernel/tcp level settings as well in order for HAProxy to behave reasonably.

     feld repeated this.