HAProxy Enterprise Documentation 1.8r2

set rate-limit ssl-sessions global

Set the process-wide SSL session rate limit.


By setting the global setting maxsslrate, you can limit the rate at which the load balancer creates SSL sessions. When it reaches the limit, it stops accepting new connections. In the snippet below, 1,000 SSL sessions per second are allowed:

   maxsslrate 1000

By default, it's set to 0, which means unlimited.

Use the set rate-limit ssl-sessions global command to change the global maxsslrate setting dynamically.


Below, we set the global SSL session rate limit to 5,000 sessions per second:

$ echo "set rate-limit ssl-sessions global 5000" |
sudo socat stdio /var/run/hapee-1.8/hapee-lb.sock

Next up

Lua scripts