HAproxy 1.5 gurus?

[Patrick]

Hi all,

I was wondering if anyone here is a HAproxy guru. What I want to do is create a QuickAssist OpenSSL accelerated HAproxy 1.5.5 VM/ bare metal machine. Then I want to benchmark it against a non-QuickAssist machine.

Also, there is a good chance HAproxy will end up being used to provide SSL for the STH main site in a similar manner.

Regards,
Patrick

 

[eva2000]

QuickAssist OpenSSL is this what you're talking about Intel® QuickAssist Technology Accelerates OpenSSL* Applications looks interesting

 

[Patrick]

QuickAssist OpenSSL is this what you're talking about Intel® QuickAssist Technology Accelerates OpenSSL* Applications looks interesting

Exactly. In theory, terminating SSL with HAproxy would become significantly less expensive.

 

[eva2000]

very nice boost in rsa 2048 signing numbers with Intel QAT - seems to be only available in Xeon E5-26xx and E5-24xx cpus with 89xx chipsets right ? no Xeon E3-12xx love ???

wonder how it stacks up to OpenSSL with chacha20_poly1305 ciphers

 

[Patrick]

E3 example: http://www.servethehome.com/Server-...1125-review-embedded-communications-platform/

Also QuickAssist on Rangeley so on the A1SRi-2758F and A1SRM-LN7F-2758

 

[eva2000]

so it's the board chipset needing to be 89xx only for QAT or need chipset 89xx + particular cpus ?

 

[Patrick]

Not 100% sure. The communications E5's are the ones that are like E5-26x8 parts. Just like the Rangeley is C2xx8. I think they are still getting conventions down and that in the future 8 will mean communications.

But also - Intel does have a QAT add-in PCIe card they are marketing for servers since there are higher data rates with the newer NICs.

 

[eva2000]

interesting stuff..

centminmod.com main web site is load balanced over 4x haproxy 1.5 load balancers (1 primary haproxy load balancer + 3 failovers) with 6x low end memory based 128-512MB VPS server backends. Unfortunately, it's all non-https port 80 based.

Been meaning to look at https and haproxy once haproxy matured more as I started with haproxy v1.5 dev builds so haven't touched SSL side of haproxy much yet.

So you want to end up with something like what I've planned for next revision of centminmod.com web site ?

If handling SPDY SSL from Nginx backends

If handling SPDY SSL from haproxy itself only

 

[Patrick]

Similar except I am using powerpoint