We’ve been fighting with HAProxy for a few days now in Amazon EC2; the experience has so far been great, but we’re stuck on squeezing more performance out of the software load balancer. We’re not exactly Linux networking whizzes (we’re a .NET shop, normally), but we’ve so far held our own, attempting to set proper ulimits, inspecting kernel messages and tcpdumps for any irregularities. So far though, we’ve reached a plateau of about 1,700 requests/sec, at which point client timeouts abound (we’ve been using and tweaking httperf for this purpose). A coworker and I were listening to the most recent Stack Overflow podcast, in which the Reddit founders note that their entire site runs off one HAProxy node, and that it so far hasn’t become a bottleneck. Ack! Either there’s somehow not seeing that many concurrent requests, we’re doing something horribly wrong, or the shared nature of EC2 is limiting the network stack of the Ec2 instance (we’re using a large instance type). Considering the fact that both Joel and the Reddit founders agree that network will likely be the limiting factor, is it possible that’s the limitation we’re seeing?
Any thoughts are greatly appreciated!
Edit It looks like the actual issue was not, in fact, with the load balancer node! The culprit was actually the nodes running httperf, in this instance. As httperf builds and tears down a socket for each request, it spends a good amount of CPU time in the kernel. As we bumped the request rate higher, the TCP FIN TTL (being 60s by default) was keeping sockets around too long, and the ip_local_port_range’s default was too low for this usage scenario. Basically, after a few minutes of the client (httperf) node constantly creating and destroying new sockets, the number of unused ports ran out, and subsequent ‘requests’ errored-out at this stage, yielding low request/sec numbers and a large amount of errors.
We also had looked at nginx, but We’ve been working with RighScale, and they’ve got drop-in scripts for HAProxy. Oh, and we’ve got too tight a deadline [of course] to switch out components unless it proves absolutely necessary. Mercifully, being on AWS allows us to test out another setup using nginx in parallel (if warranted), and make the switch overnight later on.
This page describes each of the sysctl variables fairly well (ip_local_port_range and tcp_fin_timeout were tuned, in this case).
Not really an answer to your question, but nginx and pound both have good reputations as load-balancers. WordPress just switched to nginx with good results.
But more specifically, to debug your problem. If you aren’t seeing 100% cpu usage (including I/O wait), then you are network bound, yes. EC2 internally uses a gigabit network, try using an XL instance, so you have the underlying hardware to yourself, and don’t have to share that gigabit network port.