raise ulimit-n, use haproxy user group haproxy