# HAProxy 2.0.14 crashing very often with exit code 134

**URL:** <https://discourse.haproxy.org/t/haproxy-2-0-14-crashing-very-often-with-exit-code-134/6459>\
**Category:** Help!\
**Created:** [April 12, 2021, 8:35am UTC](https://discourse.haproxy.org/t/haproxy-2-0-14-crashing-very-often-with-exit-code-134/6459 "2021-04-12T08:35:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tridevk](https://avatars.discourse-cdn.com/v4/letter/t/db5fbb/32.png) [@tridevk](https://discourse.haproxy.org/u/tridevk)\
**Post date:** [April 12, 2021, 8:35am UTC](https://discourse.haproxy.org/t/haproxy-2-0-14-crashing-very-often-with-exit-code-134/6459/1 "2021-04-12T08:35:36Z")

</div>

Hi,

we are running haproxy 2.0.14 on our dev environment and it is crashing after sometime with code 134.

* * *

[ALERT] 101/035225 (1) : Current worker #1 (51) exited with code 134 (Aborted)  
[ALERT] 101/035225 (1) : exit-on-failure: killing every processes with SIGTERM  
[WARNING] 101/035225 (1) : All workers exited. Exiting… (134)

* * *

Can you please give some clue about the reason and what to do to get around of this problem ?  
Thank you very much

Following are info of

1. haproxy -vv
2. uname -a
3. haproxy logs
4. haproxy.cfg

haproxy -vv  
HA-Proxy version 2.0.14 2020/04/02 - [https://haproxy.org/](https://haproxy.org/)  
Build options :  
TARGET = linux-glibc  
CPU = generic  
CC = gcc  
CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -Wno-unused-label -Wno-sign-compare -Wno-unused-parameter -Wno-old-style-declaration -Wno-ignored-qualifiers -Wno-clobbered -Wno-missing-field-initializers -Wtype-limits  
OPTIONS = USE\_PCRE=1 USE\_OPENSSL=1 USE\_LUA=1 USE\_ZLIB=1 USE\_SYSTEMD=1

Feature list : +EPOLL -KQUEUE -MY\_EPOLL -MY\_SPLICE +NETFILTER +PCRE -PCRE\_JIT -PCRE2 -PCRE2\_JIT +POLL -PRIVATE\_CACHE +THREAD -PTHREAD\_PSHARED -REGPARM -STATIC\_PCRE -STATIC\_PCRE2 +TPROXY +LINUX\_TPROXY +LINUX\_SPLICE +LIBCRYPT +CRYPT\_H -VSYSCALL +GETADDRINFO +OPENSSL +LUA +FUTEX +ACCEPT4 -MY\_ACCEPT4 +ZLIB -SLZ +CPU\_AFFINITY +TFO +NS +DL +RT -DEVICEATLAS -51DEGREES -WURFL +SYSTEMD -OBSOLETE\_LINKER +PRCTL +THREAD\_DUMP -EVPORTS

Default settings :  
bufsize = 16384, maxrewrite = 1024, maxpollevents = 200

Built with multi-threading support (MAX\_THREADS=64, default=16).  
Built with OpenSSL version : OpenSSL 1.0.2k-fips 26 Jan 2017  
Running on OpenSSL version : OpenSSL 1.0.2k-fips 26 Jan 2017  
OpenSSL library supports TLS extensions : yes  
OpenSSL library supports SNI : yes  
OpenSSL library supports : SSLv3 TLSv1.0 TLSv1.1 TLSv1.2  
Built with Lua version : Lua 5.3.5  
Built with network namespace support.  
Built with transparent proxy support using: IP\_TRANSPARENT IPV6\_TRANSPARENT IP\_FREEBIND  
Built with zlib version : 1.2.7  
Running on zlib version : 1.2.7  
Compression algorithms supported : identity(“identity”), deflate(“deflate”), raw-deflate(“deflate”), gzip(“gzip”)  
Built with PCRE version : 8.32 2012-11-30  
Running on PCRE version : 8.32 2012-11-30  
PCRE library supports JIT : no (USE\_PCRE\_JIT not set)  
Encrypted password support via crypt(3): yes

Available polling systems :  
epoll : pref=300, test result OK  
poll : pref=200, test result OK  
select : pref=150, test result OK  
Total: 3 (3 usable), will use epoll.

Available multiplexer protocols :  
(protocols marked as cannot be specified using ‘proto’ keyword)  
h2 : mode=HTX side=FE|BE mux=H2  
h2 : mode=HTTP side=FE mux=H2  
 : mode=HTX side=FE|BE mux=H1  
 : mode=TCP|HTTP side=FE|BE mux=PASS

Available services : none

Available filters :  
[SPOE] spoe  
[COMP] compression  
[CACHE] cache  
[TRACE] trace

* * *

uname -a

Linux mnc-haproxy 4.18.0-240.el8.x86\_64 #1 SMP Wed Sep 23 05:13:10 EDT 2020 x86\_64 x86\_64 x86\_64 GNU/Linux

logs of haproxy :-:

* * *

Thread 3 is about to kill the process.

> Thread 1 : act=1 glob=1 wq=0 rq=0 tl=0 tlsz=0 rqsz=0  
> stuck=1 fdcache=1 prof=0 harmless=0 wantrdv=0  
> cpu\_ns: poll=2119763113 now=4043048166 diff=1923285053  
> curr\_task=0  
> Thread 2 : act=1 glob=1 wq=0 rq=0 tl=0 tlsz=0 rqsz=0  
> stuck=1 fdcache=1 prof=0 harmless=0 wantrdv=0  
> cpu\_ns: poll=2889080862 now=4914504896 diff=2025424034  
> curr\_task=0  
> \*\>Thread 3 : act=1 glob=1 wq=0 rq=0 tl=0 tlsz=0 rqsz=0  
> stuck=1 fdcache=1 prof=0 harmless=0 wantrdv=0  
> cpu\_ns: poll=2280737678 now=5008029696 diff=2727292018  
> curr\_task=0  
> …  
> …  
> …

Thread 15: act=1 glob=1 wq=0 rq=0 tl=0 tlsz=0 rqsz=0  
stuck=0 fdcache=1 prof=0 harmless=0 wantrdv=0  
cpu\_ns: poll=2215901996 now=2224364418 diff=8462422  
curr\_task=0x7fad6803c050 (tasklet) calls=2  
fct=0x42c670=main+47584 (?) ctx=0x7fad80049220  
Thread 16: act=0 glob=0 wq=0 rq=0 tl=0 tlsz=0 rqsz=0  
stuck=0 fdcache=0 prof=1 harmless=1 wantrdv=0  
cpu\_ns: poll=4711777691 now=6464605747 diff=1752828056  
curr\_task=0  
[ALERT] 101/035225 (1) : Current worker #1 (51) exited with code 134 (Aborted)  
[ALERT] 101/035225 (1) : exit-on-failure: killing every processes with SIGTERM  
[WARNING] 101/035225 (1) : All workers exited. Exiting… (134)

* * *

# haproxy.cfg

global  
log stdout format raw local0 debug  
tune.ssl.default-dh-param 2048  
user otn  
group otn  
tune.http.maxhdr 32767

# tune.maxrewrite 1024

```
    tune.bufsize 163840  
master-worker        

```

defaults  
mode http  
log global  
option http-server-close  
option httplog  
option dontlognull  
option redispatch  
option forwardfor  
retries 3  
backlog 4096  
timeout client 200s  
timeout client-fin 20s  
timeout connect 5s  
timeout server 100s  
timeout tunnel 15m  
timeout http-keep-alive 30s  
timeout http-request 10s  
timeout queue 5s  
timeout tarpit 60s  
maxconn 10000   
option accept-invalid-http-response  
default-server inter 3s rise 2 fall 3 init-addr last,libc,none

frontend default\_ports  
bind \*:80 user otn group otn  
option httplog  
http-request add-header X-Forwarded-Proto https  
http-request redirect location https://“$APP\_IP”:“$port”/cas/login

frontend default\_ports\_443  
bind \*:443 user otn group otn ssl crt /usr/local/etc/cert.crt  
option tcplog  
acl fault\_path path\_beg -i /FaultManagement  
use\_backend nspos\_serv1 if fault\_path  
default\_backend nspos\_serv

frontend web\_gateway  
bind \*:“$port” ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
http-request set-query %[query,regsub(:“$port”,g)]  
http-request set-uri %[url,regsub(otntomcat,“$APP\_IP”,g)]  
redirect scheme https if !{ ssl\_fc }  
acl mnc\_spcms\_path path\_beg -i /spcms  
use\_backend mnc\_spcms\_serv if mnc\_spcms\_path  
acl otntomcat\_path path\_beg -i /oms1350  
acl dojoroot\_path path\_beg -i /dojoroot  
acl p1 path\_beg -i /jointroot  
acl p2 path\_beg -i /jquery  
acl p3 path\_beg -i /lodash  
acl p4 path\_beg -i /openlayersroot  
acl p6 path\_beg -i /svgutilsroot  
acl p7 path\_beg -i /d3root  
acl p8 path\_beg -i /backbone  
acl p9 path\_beg -i /Cpb  
use\_backend otntomcat if otntomcat\_path || dojoroot\_path || p1 || p2 || p3 || p4 || p6 || p7 || p8  
acl cpb\_path path\_beg -i /Cpb  
use\_backend cpb\_serv if cpb\_path  
acl cas\_path path\_beg -i /cas  
http-request set-var(txn.path) path  
acl session\_path path\_beg -i /session-manager  
use\_backend nspos\_serv if cas\_path || session\_path  
acl fault\_path path\_beg -i /FaultManagement  
acl mncfm\_help\_path path\_beg /HelpCenter  
acl mncfm\_search\_path path\_beg /SearchApp  
use\_backend nspos\_serv1 if fault\_path || mncfm\_help\_path || mncfm\_search\_path  
acl int\_path path\_beg -i /internal  
use\_backend nspos\_serv if int\_path  
use\_backend cpb\_serv if p9  
acl ntsm\_path path\_beg -i /ntsm  
use\_backend ntsm\_serv if ntsm\_path  
acl systemmonitor\_path path\_beg -i /systemmonitor  
use\_backend systemmonitor\_serv if systemmonitor\_path  
acl wso\_path path\_beg -i /wso  
use\_backend wso\_serv if wso\_path  
acl motn\_path path\_beg -i /onc  
use\_backend motn\_serv if motn\_path  
acl nrct\_tapi\_path path\_beg -i /tapi  
use\_backend nrct\_tapi\_serv if nrct\_tapi\_path  
acl mnc-esm\_path path\_beg -i /esm  
use\_backend mnc-esm\_serv if mnc-esm\_path  
acl mnc-map\_path path\_beg -i /mnc-map  
use\_backend mnc-map\_serv if mnc-map\_path  
acl mncpm\_path path\_beg -i /mncpm  
use\_backend pm-components\_serv if mncpm\_path  
acl search\_path path\_beg /search  
use\_backend otntomcat\_search if search\_path  
default\_backend nspos\_serv

frontend nrct\_tapi\_frontend  
bind \*:8543 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl nrct\_tapi\_path path\_beg -i /tapi  
use\_backend nrct\_tapi\_serv if nrct\_tapi\_path

frontend motn\_frontend  
bind \*:8444 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl motn\_path path\_beg -i /onc  
use\_backend motn\_serv if motn\_path

frontend event\_web\_gateway  
bind \*:8443 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
http-request set-query %[query,regsub(:“$port”,g)]  
http-request set-uri %[url,regsub(otntomcat,“$APP\_IP”,g)]  
redirect scheme https if !{ ssl\_fc }  
acl oms1350\_path path\_beg -i /oms1350  
use\_backend otntomcat if oms1350\_path  
acl search\_path path\_beg /search  
use\_backend otntomcat\_search if search\_path

frontend ntsm\_frontend  
bind \*:8546 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl ntsm\_path path\_beg -i /ntsm  
use\_backend ntsm\_serv if ntsm\_path

frontend mnc\_admin\_frontend2  
bind \*:8548 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl systemmonitor\_path path\_beg -i /systemmonitor  
use\_backend systemmonitor\_serv if systemmonitor\_path

frontend wso\_frontend  
bind \*:8549 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl wso\_path path\_beg -i /wso  
use\_backend wso\_serv if wso\_path

frontend mnc-esm\_frontend  
bind \*:8547 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl mnc-esm\_path path\_beg -i /esm  
use\_backend mnc-esm\_serv if mnc-esm\_path

frontend cpb\_frontend  
bind \*:8001 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl cpb\_path path\_beg -i /Cpb  
use\_backend cpb\_serv if cpb\_path

frontend pm\_components\_frontend  
bind \*:8751 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl mncpm\_path1 path\_beg -i /mncpm  
acl mncpm\_path2 path\_beg -i /pmservice  
use\_backend pm-components\_serv if mncpm\_path1 || mncpm\_path2

frontend mnc\_spcms\_frontend  
bind \*:8550 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl mnc\_spcms\_path path\_beg -i /spcms  
use\_backend mnc\_spcms\_serv if mnc\_spcms\_path

frontend mnc\_fm\_frontend  
bind \*:8544 ssl crt /usr/local/etc/cert.crt  
http-request add-header X-Forwarded-Proto https  
redirect scheme https if !{ ssl\_fc }  
acl mncfm\_help\_path path\_beg -i /HelpCenter  
acl mnc\_fm\_path path\_beg -i /FaultManagement  
acl mncfm\_search\_path path\_beg /SearchApp  
use\_backend nspos\_serv1 if mnc\_fm\_path || mncfm\_help\_path || mncfm\_search\_path  
default\_backend nspos\_serv

resolvers docker\_nfmt-net  
nameserver dns1 127.0.0.11:53

backend otntomcat  
mode http  
balance roundrobin  
log stdout local0 debug  
server serv01 otntomcat:8443 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\botntomcat\b)(._)$ \1"$APP\_IP"\3  
http-response replace-header Location (._)(\b:80/\b)(._)$ \1:“$port”/\3  
http-response replace-header Location (._)(\b:443/\b)(._)$ \1:“$port”/\3  
http-response replace-header Location (._)(\b:8544/\b)(._)$ \1:“$port”/\3  
http-response replace-header Location (._)(\b:8545/\b)(._)$ \1:“$port”/\3

# http-response replace-header Location (._)(\b:8443/\b)(._)$ \1:“$port”/\3

```
http-response replace-header Location (.*)(\b\/oms1350\/pages\/otn\b)(.*) \1:"$port"\/oms1350\/pages\/otn\3
http-response replace-header Location (.*)(\b\/oms1350\/login\/cas\b)(.*) \1:"$port"\/oms1350\/login\/cas\3
http-request add-header X-Forwarded-Proto https if { ssl_fc }

```

backend otntomcat\_search  
mode http  
balance roundrobin  
log stdout local0 debug  
server serv01 otntomcat:8443 resolvers docker\_nfmt-net check ssl verify none

# http-response replace-header Location (._)(\b:8443/\b)(._)(?=?) \1:“$port”/\3

```
http-request add-header X-Forwarded-Proto https if { ssl_fc }

```

backend nspos\_serv  
mode http  
balance roundrobin  
no option checkcache   
log stdout local0 debug  
acl path\_cas var(txn.path) -m beg -i /cas  
acl c1 hdr(Location) urlp(service)  
server srv01 nspos:443 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\botntomcat\b)(._)$ \1"$APP\_IP"\3  
http-response replace-header Location (._)(\b"$APP\_IP"/cas/login\b)(._) \1"$APP\_IP":“$port”/cas/login\3  
http-response replace-header Location (._)(\b"$APP\_IP"/oms1350/login\b)(._) \1"$APP\_IP":“$port”/oms1350/login\3  
http-response replace-header Location (._)(\b"$APP\_IP"/session-manager/login\b)(._) \1"$APP\_IP":“$port”/session-manager/login\3  
http-response replace-header Location (._)(\b:“$port”:“$port”/session-manager/login\b)(._) \1:“$port”/session-manager/login\3

# http-response replace-header Location (._)(\b:8443/\b)(._)$ \1:“$port”/\3

# http-response replace-header Location (._)(\b:8443/\b)(._)(?=?) \1:“$port”/\3

```
http-response replace-header Location ^(https://[^:]+):(\d+)(.*) \1:"$port"\3
http-response replace-header Location (.*)(\b\/cas\/logout\b)(.*) \1:"$port"\/cas\/logout\3
http-response replace-header Location (.*)(\bhttps:\/\/(.*):)\b(.*) \1https:\/\/"$APP_IP":\4 if path_cas 
http-request add-header X-Forwarded-Proto https if { ssl_fc }

```

backend nspos\_serv1  
mode http  
balance roundrobin  
no option checkcache  
server srv01 nspos:8544 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8544/\b)(._)$ \1:“$port”/\3

# http-response replace-header Location (._)(\b:443/\b)(._)$ \1:“$port”/\3

```
http-request add-header X-Forwarded-Proto https if { ssl_fc }

```

backend ntsm\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 ntsm:8546 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8546/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend systemmonitor\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 mnc-admin:8548 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8548/\b)(._)$ \1:“$port”/\3  
http-response replace-header Location (._)(\b:443/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend wso\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 wso:8549 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8549/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend motn\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 otncore:8444 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8444/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend nrct\_tapi\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 nrct-tapi:8543 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8543/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend mnc-map\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 mnc-map:8443 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8880/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend mnc-esm\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 mnc-esm:8547 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8547/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend cpb\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 mnc-cpb:8443 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8001/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend pm-components\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 pm-components:8751 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8751/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

backend mnc\_spcms\_serv  
mode http  
balance roundrobin  
log stdout local0 debug  
server srv01 mnc-syspref:8550 resolvers docker\_nfmt-net check ssl verify none  
http-response replace-header Location (._)(\b:8550/\b)(._)$ \1:“$port”/\3  
http-request add-header X-Forwarded-Proto https if { ssl\_fc }

listen stats  
bind \*:1974  
stats enable  
stats uri /