HAProxy community

Haproxy load testing on h2 responce with NOSRV after 6000 hit/s

i dont know if the error comming from my config, can anyone help

Build options :
  TARGET  = linux-glibc
  CPU     = generic
  CC      = gcc
  CFLAGS  = -O2 -g -O2 -fdebug-prefix-map=/build/haproxy-GH4GHa/haproxy-2.0.8=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -fno-strict-aliasing -Wdeclaration-after-statement -fwrapv -Wno-format-truncation -Wno-unused-label -Wno-sign-compare -Wno-unused-parameter -Wno-old-style-declaration -Wno-ignored-qualifiers -Wno-clobbered -Wno-missing-field-initializers -Wno-implicit-fallthrough -Wno-stringop-overflow -Wno-cast-function-type -Wtype-limits -Wshift-negative-value -Wshift-overflow=2 -Wduplicated-cond -Wnull-dereference


Default settings :
  bufsize = 16384, maxrewrite = 1024, maxpollevents = 200

Built with multi-threading support (MAX_THREADS=64, default=16).
Built with OpenSSL version : OpenSSL 1.1.1c  28 May 2019
Running on OpenSSL version : OpenSSL 1.1.1d  10 Sep 2019
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2 TLSv1.3
Built with Lua version : Lua 5.3.3
Built with network namespace support.
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
Built with zlib version : 1.2.11
Running on zlib version : 1.2.11
Compression algorithms supported : identity("identity"), deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
Built with PCRE2 version : 10.32 2018-09-10
PCRE2 library supports JIT : yes
Encrypted password support via crypt(3): yes
Built with the Prometheus exporter as a service

Available polling systems :
      epoll : pref=300,  test result OK
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 3 (3 usable), will use epoll.

Available multiplexer protocols :
(protocols marked as <default> cannot be specified using 'proto' keyword)
              h2 : mode=HTX        side=FE|BE     mux=H2
              h2 : mode=HTTP       side=FE        mux=H2
       <default> : mode=HTX        side=FE|BE     mux=H1
       <default> : mode=TCP|HTTP   side=FE|BE     mux=PASS

Available services :

Available filters :
	[SPOE] spoe
	[COMP] compression
	[CACHE] cache
	[TRACE] trace


	log /dev/log	local0
	log /dev/log	local1 notice
	chroot /var/lib/haproxy
	stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
	stats timeout 30s
	user haproxy
	group haproxy
        tune.h2.max-concurrent-streams 100000
    	tune.maxaccept -1
    	tune.ssl.default-dh-param 2048
    	maxconn 2000000
    	nbproc 1
    	nbthread 8
    	cpu-map auto:1/1-8 0-7
        tune.ssl.cachesize 1000000

 	# Default SSL material locations
	ca-base /etc/ssl/certs
	crt-base /etc/ssl/private

	# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
        ssl-default-bind-options no-sslv3  no-tls-tickets

	log	global
	mode	http
	option	httplog
	option	dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
	errorfile 400 /etc/haproxy/errors/400.http
	errorfile 403 /etc/haproxy/errors/403.http
	errorfile 408 /etc/haproxy/errors/408.http
	errorfile 500 /etc/haproxy/errors/500.http
	errorfile 502 /etc/haproxy/errors/502.http
	errorfile 503 /etc/haproxy/errors/503.http
	errorfile 504 /etc/haproxy/errors/504.http
	maxconn 200000
        retries 3

frontend public
    bind :443 ssl crt /etc/ssl/private/perfheck.crt alpn h2,http/1.1
    mode http
    default_backend perfheck

    option forwardfor
    maxconn 200000


backend perfheck
  maxconn 200000
  balance roundrobin
  mode http
  server srv01 ssl verify none 
  server srv02  ssl verify none  
  server srv03  ssl verify none  
  server srv04  ssl verify none  
  server srv05  ssl verify none  
  server srv06 ssl verify none 


Oct 30 18:27:43 server haproxy[25002]: [30/Oct/2019:18:27:10.353] public~ perfheck./<NOSRV> -1/-1/32673 0 CR 2/2/96/0/3 0/0
Oct 30 18:27:43 server haproxy[25002]: [30/Oct/2019:18:27:10.353] public~ perfheck.<NOSRV> -1/-1/32673 0 CR 2/2/95/0/3 0/0
Oct 30 18:27:43 server haproxy[25002]: [30/Oct/2019:18:27:10.353] public~ perfheck./<NOSRV> -1/-1/32673 0 CR 2/2/94/0/3 0/0

after some changes in backend and haproxy config i am able to reach 35 000 hit/s, but when going for more than that i see the NOSRV error i’m using a debian 10 with 16 cpu 14g