Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NGINX open sources TCP load balancing

hg.nginx.org

Post reply on HN
Print view View original

81–90 of 121 posts

Re: NGINX open sources TCP load balancing

#81

Post by hrez »

jsmthrowaway wrote: post #78
hrez wrote: post #74

Earlier quoted context omitted.

I'd challenge ELB usage in such configuration. R53 should be enough.

It's nice for clean removal of a HAproxy from rotation as well as insulating against HAproxy failures without worrying about DNS caching, not to mention wildly different DNS behavior on different platforms. Some platforms unconditionally use only the first address in a RR A, which is why BIND (and maybe R53) has the "randomize A records" functionality.

ELB isn't magic either. You have to CNAME to it (i.e. mandatory AWS lookup) or use R53. Combine that with ELB slow on-ramp issues on load spikes and the fact that you pay per Gb of traffic passing through and I don't see a benefit. R53 has various advanced synthetic record types as well as healthchecks.

Re: NGINX open sources TCP load balancing

#82

Post by weitzj »

adrenalinup wrote: post #56

Why would somebody need a TCP load balancer in a web server ? Is there a use-case where the TCP load balancer being with the web-server made a lot of sense ? Integrating too many features into a single software can be risky as it may compromise simplicity and the UNIX way, 1 tool for 1 job..

I guess when further people adopt HTTP2, where each user will have only one tcp connection to transfer your files, you have to figure out load balancing to stick to your connection.

Re: NGINX open sources TCP load balancing

#84

Post by jffry »

emcrazyone wrote: post #83

huh, I thought all of NGINX was open source and so I'm confused by the title "NGINX open sources TCP load balancing." Just a bad title or am I missing something?

A bit under two years ago, NGINX announced NGINX+ [1], with an open source "core" and paid-for extras [2]

[1]: https://news.ycombinator.com/item?id=6255592

[2]: http://nginx.com/products/feature-matrix/

Re: NGINX open sources TCP load balancing

#87

Post by mkhpalm »

phildougherty wrote: post #80
sparaker wrote: post #71

Earlier quoted context omitted.

HAProxy offers a better DDos mitigation configurables in comparison to nginx. Thats it.

CloudFlare is build on top of OpenResty which is basically stock nginx with ngx_lua and a bunch of other modules built in. I would argue that if you want it to be, nginx can be much better at DDoS mitigation. You can use the modules limit_conn and limit_req to control how many connection individual IPs can make to your server for basic control.

You can add various things on top of nginx... but you can use stock haproxy to limit the number of connections by source IP.

Re: NGINX open sources TCP load balancing

#88

Post by phildougherty »

gmjosack wrote: post #79
aleem wrote: post #72

Earlier quoted context omitted.

Not to mention the vast ecosystem of some really great nginx plugins. The one thing I have found desperately wanting in both nginx and haproxy is the support for real-time stats and filtering found in Varnish (supports HTTP only). I am absolutely hooked! // Query Times varnishncsa -F '%t %{VCL_Log:Backend}x %Dμs %bB %s %{Varnish:hitmiss}x "%r"' // Slow Queries varnishncsa -F '%t %{VCL_Log:Backend}x %Dμs %bB %s %{Varn…

I've been able to get real-time stats in nginx by adding custom counters with the lua plugin and exporting a stats handler. http://wiki.nginx.org/HttpLuaModule#ngx.shared.DICT

You can also use collectd nginx module along with nginx stub-status module to gather some useful metrics.

Re: NGINX open sources TCP load balancing

#89

Post by dschiptsov »

This is, perhaps, a canonical example of how management's attempt to monetize an open source project will cause sub-optimal results both in code quality and profits.

New features should be developed and tested in an open version, so the feedback, testing, patches and even unexpected new improvements from high skilled enthusiasts would be incorporated much more quickly than any closed team with QA (look at the Linux kernel).

We have seen too many examples of "acquiring" open source projects to monetize on its user base (how I hate that idiotic MBA slang) which then became stagnant - from MySQL to Xen, you name it.

I wonder what mr. Sysoev is writing these days?)

Re: NGINX open sources TCP load balancing

#90

Post by jsmthrowaway »

hrez wrote: post #81
jsmthrowaway wrote: post #78

Earlier quoted context omitted.

It's nice for clean removal of a HAproxy from rotation as well as insulating against HAproxy failures without worrying about DNS caching, not to mention wildly different DNS behavior on different platforms. Some platforms unconditionally use only the first address in a RR A, which is why BIND (and maybe R53) has the "randomize A records" functionality.

ELB isn't magic either. You have to CNAME to it (i.e. mandatory AWS lookup) or use R53. Combine that with ELB slow on-ramp issues on load spikes and the fact that you pay per Gb of traffic passing through and I don't see a benefit. R53 has various advanced synthetic record types as well as healthchecks.

Wow, neat. To be honest, I had no idea Route 53 had grown that functionality; I'm only just now getting back to a startup and have been in Netscaler land for a while. In that case, you bet, I'd use Route 53 now instead. That actually sounds pretty useful and I'm going to check it out. Thanks for the tip.
Post reply on HN