3 ms·
That's egress traffic :) And yeah, https://github.com/QubitProducts/bamboo/issues/143#issuecomment-139306818 https://github.com/QubitProducts/bamboo/issues/143#
by fidget 11y ago
That's egress traffic :) And yeah, https://github.com/QubitProducts/bamboo/issues/143#issuecomment-139306818 https://github.com/QubitProducts/bamboo/issues/143#issuecomm... is currently my best idea (with some additional nfq stuff). Doesn't help when requests span the entirety of the reload though.
- jolynch 11y agoI mean, I wouldn't encourage anyone to use HAProxy for microservice load balancing unless they're running it on every node, at which point clients are always talking to localhost and everything is egress. That being said, you can turn ingress into egress with an ifb. A coworker of mine created a proof of concept for using our strategy with an external facing load balancer but I don't think he ever tried it in production so I'm not sure how well it works. To be fair I'm scared of both the iptables and tc solution on external LBs because you might never know that you're refusing connections accidentally. Linux 4.4 is coming with some patches that should help with this and afaik BSDs have done it right since the start.