Skip to content

Commit a55feb4

Browse files
committed
OCPBUGS-62232: Set -fin timeouts in HAProxy config
We have a bug where misbehaved clients are exhausting the connection limits by starting a connection and abandoning it before it is even established. Setting the client-fin timeout is a recommended option to address this sort of situation. This patch also sets server-fin in the interest of symmetry and avoiding any similar issues on the server side.
1 parent 4f14943 commit a55feb4

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

templates/master/00-master/on-prem/files/haproxy-haproxy.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,8 @@ contents:
1717
timeout client 86400s
1818
timeout server 86400s
1919
timeout tunnel 86400s
20+
timeout client-fin 1s
21+
timeout server-fin 1s
2022
{{`{{- if gt (len .LBConfig.Backends) 0 }}`}}
2123
frontend main
2224
bind :::{{`{{ .LBConfig.LbPort }}`}} v4v6

0 commit comments

Comments
 (0)