BUG/MEDIUM: ssl engines: Fix async engines fds were not considered to fix fd limit automatically.
The number of async fd is computed considering the maxconn, the number
of sides using ssl and the number of engines using async mode.
This patch should be backported on haproxy 1.8
diff --git a/src/haproxy.c b/src/haproxy.c
index bd8608f..eb5e65b 100644
--- a/src/haproxy.c
+++ b/src/haproxy.c
@@ -1780,6 +1780,11 @@
global.hardmaxconn = global.maxconn; /* keep this max value */
global.maxsock += global.maxconn * 2; /* each connection needs two sockets */
global.maxsock += global.maxpipes * 2; /* each pipe needs two FDs */
+ /* compute fd used by async engines */
+ if (global.ssl_used_async_engines) {
+ int sides = !!global.ssl_used_frontend + !!global.ssl_used_backend;
+ global.maxsock += global.maxconn * sides * global.ssl_used_async_engines;
+ }
if (global.stats_fe)
global.maxsock += global.stats_fe->maxconn;