at sert principalement à faire de la traduction d'adresse réseau.

able utilisée pour la translation d'adresse ou la translation de port.
Il a 2 types de chaînes# : PREROUTING qui permet de spécifier « à l'arrivée du pare-feu » et la chaîne POSTROUTING qui permet de spécifier « à la sortie du pare-feu ». Il existe 3 targets (ou cibles) : DNAT*, SNAT* et MASQUERADE*.

axRequestsPerChild is really only useful for containing resource leaks.

roxy using the default init scripts will kill any existing connections, and prevent any new connections while it restarts. With the init script restart method (eg ‘/etc/init.d/haproxy restart’), if there are any configuration errors, the service wont start up again. This might be fine for low volume sites, but if you are dealing with heavy traffic, you would want to reload the configuration with the smallest amount of downtime possible.

Thankfully HAProxy provides the ability to do this. The ‘-st’ and ‘-sf’ parameter options are used for hot configuration changes.

Both parameter options allow for hot configuration changes, with the difference being that the ‘-st’ option forces the existing HAProxy instance to kill all existing connections, where as the ‘-sf’ option tells the existing HAProxy instance to finish doing any work, and then softly close.

If there are any configuration errors in the config file, HAProxy will not complete the configuration reload, and will remain running with the existing config.