<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Karsten,</p>
    <p>Thanks for your answer!</p>
    <p>Out of your head, were there any significant changes in TCP/TLS
      on 5.4 -> 5.5 change?<br>
    </p>
    <pre class="moz-signature" cols="72">Regards,
Igor</pre>
    <div class="moz-cite-prefix">Le 22.06.2022 à 18:11, Karsten Horsmann
      a écrit :<br>
    </div>
    <blockquote type="cite"
cite="mid:CAFArqsYKrpAHANRi35W5=+Kt+=7qgWFtmjXqZfeKW5pRbGMOVQ@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="auto">
        <div>Hi Igor, </div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">I also use CentOS 7 with the same openssl
          version and between 1000 up to 2000 tls/wss connections. </div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">Works for me. Main difference I use Kamailio
          5.5.x</div>
        <div dir="auto"><br>
        </div>
        <div dir="auto">Kind regards </div>
        <div dir="auto">Karsten Horsmann <br>
          <br>
          <div class="gmail_quote" dir="auto">
            <div dir="ltr" class="gmail_attr">Igor Olhovskiy <<a
                href="mailto:igorolhovskiy@gmail.com"
                moz-do-not-send="true" class="moz-txt-link-freetext">igorolhovskiy@gmail.com</a>>
              schrieb am Mi., 22. Juni 2022, 10:36:<br>
            </div>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div dir="ltr">
                <div>Hello!</div>
                <div><br>
                </div>
                <div>Due to I still experience irregular Kamailio 5.4
                  crashes (like 1/month) related to SSL (using
                  websockets and SIPS) I'm wondering, could openSSL
                  upgrade change the situation?</div>
                <div>As of now in CentOS 7 I have 1.0.2k version. <br>
                </div>
                <div><br>
                </div>
                <div>Does anyone have experience to fix crash-related to
                  TLS problems with openSSL upgrade?</div>
                <div><br>
                </div>
                <div>Or maye some tuneup of TCP parameters can help
                  here?My current setup is quite simple:</div>
                <div><br>
                </div>
                <div>children=4<br>
                </div>
                <div>enable_tls=yes<br>
                  tcp_accept_no_cl=yes<br>
                  tcp_connection_lifetime=600<br>
                  tcp_max_connections=998976 # 1000000 - 1024, so we're
                  leaving 1k for system reserve<br>
                  tls_max_connections=998976</div>
                <div><br>
                </div>
                <div>Number of clients ~ 200 constantly connected to
                  websocket.<br>
                </div>
                <div>-- <br>
                  <div dir="ltr" data-smartmail="gmail_signature">
                    <div dir="ltr">Best regards,
                      <div>Igor</div>
                    </div>
                  </div>
                </div>
              </div>
              __________________________________________________________<br>
              Kamailio - Users Mailing List - Non Commercial Discussions<br>
                * <a href="mailto:sr-users@lists.kamailio.org"
                target="_blank" rel="noreferrer" moz-do-not-send="true"
                class="moz-txt-link-freetext">sr-users@lists.kamailio.org</a><br>
              Important: keep the mailing list in the recipients, do not
              reply only to the sender!<br>
              Edit mailing list options or unsubscribe:<br>
                * <a
                href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users"
                rel="noreferrer noreferrer" target="_blank"
                moz-do-not-send="true" class="moz-txt-link-freetext">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
            </blockquote>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
      <pre class="moz-quote-pre" wrap="">__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * <a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
  * <a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
    </blockquote>
  </body>
</html>