Re: PROBLEM: Infinite listens for haproxy in /proc/net/tcp

[Willy Tarreau <w@1wt.eu>]

Hi,

On Thu, Dec 02, 2010 at 01:18:36PM -0500, Stephane Bakhos wrote:
> This happens whether the file is read directly, or using netstat.
> It looks like haproxy has millions of LISTEN.

I think what you see are not LISTEN sockets but mostly TIME_WAIT.

> We've tried to see if there is a definitive count, but after 20 minutes of 
> running cat /proc/net/tcp we gave up. This is an intermittent problem.

I've been used to experience this on systems which process connections
at higher rates than netstat can output them. Thus, during the time it
takes to netstat to output a given number of connections, new ones
manage to complete the list. I've not tested on 2.6.36 yet, but this
has basically always been the case for me for a very long time, and as
such, I only use ss to display connections. I've recently discovered
that some versions of netstat use netlink to dump the socket list, so
on such versions it would not be an issue.

> According to ss, there is about 5500 connections running on the system.

What normally counts is the rate at which they're refreshed.

Regards,
Willy