# HAProxy throttling concurrent connections from different src ips

**URL:** <https://discourse.haproxy.org/t/haproxy-throttling-concurrent-connections-from-different-src-ips/2481>\
**Category:** Help!\
**Created:** [May 10, 2018, 4:05pm UTC](https://discourse.haproxy.org/t/haproxy-throttling-concurrent-connections-from-different-src-ips/2481 "2018-05-10T16:05:55Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![shivharsh](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/shivharsh/32/388_2.png) [@shivharsh](https://discourse.haproxy.org/u/shivharsh)\
**Post date:** [May 11, 2018, 10:46am UTC](https://discourse.haproxy.org/t/haproxy-throttling-concurrent-connections-from-different-src-ips/2481/2 "2018-05-11T10:46:08Z")

</div>

Hi mshirali,

Considering the fact that you log high CPU utilization at high load, the very first thing i would recommend you to ensure is that your CPU cores are not over/under utilized. When you are using HAProxy on a machine with multiple cores you need to tune haproxy to utilize all the cores by forking multiple processes of HAProxy. You may achieve this using nbproc parameter as shown below:

> ##If you have a system with 4 CPU cores, it is recommended to run one haproxy process per core.
> 
> ```
> global
> nbproc 4
> cpu-map 1 1
> cpu-map 2 2
> cpu-map 3 3
> cpu-map 4 4
> 
> ```

Once you are done with tuning haproxy for the number of cores, the next step should be throttling the rate of requests. There are 2 ways to throttle your requests:

1. Rate limiting requests per second using request rate counters in stick tables and ACLs.
2. Limiting the number of concurrent connections using the maxconn parameter.

Out of the above two options, i would recommend you the second one. Reason being, the use of request queues when the total number of requests reach the maxconn limit. Contrary to this in option 1, the new requests are dropped and not accepted if the maximum request limit is reached. This could lead to a bad user experience.

You can define maxconn limits at three locations:

1. maxconn in global section: to limit the number of concurrent connections allowed per haproxy process.
2. maxconn in frontend section: to limit the number of concurrent connections allowed per frontend.
3. server maxconn: to limit the number of concurrent connections allowed per server in a backend.

You may set appropriate value for these parameters depending on your rate of request and desired throughput.

Refer to below post for further details on maxconn parameter:

> [@Haproxy settings priority](https://discourse.haproxy.org/t/haproxy-settings-priority/2237/2):
>
> Hi, In order to answer your questions, we first need to understand where and how maxconn property works. Basically, maxconn property can be set in 3 different locations in HAProxy configuration (/etc/haproxy.cfg) file : 1. maxconn in global section 2. maxconn in listen section 3. server maxconn Now, coming to the how part: maxconn in global section sets the maximum number of concurrent connections allowed per process (by default HAProxy runs with a single process. Multiple processes can…

Hope this is helpful !

Thanks,  
Shivharsh

---

_[View the full topic](https://discourse.haproxy.org/t/haproxy-throttling-concurrent-connections-from-different-src-ips/2481)._