<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial, sans-serif" size="2">
<div>Hello,</div>
<div> </div>
<div>Sorry, next try with posting this message. Attempts with attachment failed due to message size.</div>
<div>We are running OpenSER in a pilot project and unfortunately have some stability problems.</div>
<div>Any help or hints are appreciated.</div>
<div> </div>
<div><font face="Times New Roman, serif" size="3">Project information</font></div>
<div><font face="Times New Roman, serif" size="3">OpenSER is used in a pilot project with</font></div>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 18pt; ">
<font face="Times New Roman, serif" size="3">
<li>Appr. 5000 subscriber accounts</li><li>Appr. 1200 simultaneously registered users</li><li>Signalling encrypted with TLS</li><li>Media data encrypted with SRTP</li><li>Clients: softphones and hardphones</li><li>Re-registration time for clients: 3600 sec</li></font>
</ul>
<div><font face="Times New Roman, serif" size="3"> </font></div>
<div><font face="Times New Roman, serif" size="3">OpenSER configuration</font></div>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 18pt; ">
<font face="Times New Roman, serif" size="3">
<li>Works as stateful SIP Proxy</li><li>mySQL database</li><li>Version 1.3.4.-TLS</li><li>Tcp_children: 100 --> is it recommended to increase this number?</li><li>Udp_children: 20</li><li>Tcp_connection_timeout: 3600</li><li>Shared memory: </li></font>
</ul>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 54pt; ">
<font face="Times New Roman, serif" size="3">
<li>-m 512 when error occurred</li><li>Now set to 1024</li></font>
</ul>
<div><font face="Times New Roman, serif" size="3"> </font></div>
<div><font face="Times New Roman, serif" size="3"><b>Problems</b></font></div>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 18pt; ">
<font face="Times New Roman, serif" size="3">
<li>Shared memory consumption</li></font>
</ul>
<div style="padding-left: 18pt; "><font face="Times New Roman, serif" size="3">Shared memory usage is permanently increasing (about 50 MB per day)</font></div>
<div style="padding-left: 18pt; "><font face="Times New Roman, serif" size="3">Application already crashed twice</font></div>
<div style="padding-left: 18pt; "><font face="Times New Roman, serif" size="3"> </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">First messages were, these, repeated thousands of times (5915 times):</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 08:54:52 si-…. /usr/local/sbin/openser[13921]: ERROR:core:tcpconn_new: shared memory allocation failure </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 08:54:52 si-… /usr/local/sbin/openser[13921]: ERROR:core:handle_new_connect: tcpconn_new failed, closing socket </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">And a few of these also (7613 times):</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 08:57:24 si-… /usr/local/sbin/openser[13880]: ERROR:core:tls_accept: some error in SSL: </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 08:57:24 si-… /usr/local/sbin/openser[13880]: ERROR:core:tls_print_errstack: error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif"> </font></div>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 18pt; ">
<font face="Times New Roman, serif" size="3">
<li>TCP errors, lost SIP messages</li></font>
</ul>
<div><font face="Times New Roman, serif" size="3"> </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Examples from error messages:</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">14.100 times in log file from 17.06.09</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: ERROR:core:tcp_blocking_connect: poll error: flags 18 </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: ERROR:core:tcp_blocking_connect: failed to retrieve SO_ERROR (111) Connection refused </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: ERROR:core:tcpconn_connect: tcp_blocking_connect failed </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: ERROR:core:tcp_send: connect failed </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-.. /usr/local/sbin/openser[13863]: ERROR:tm:msg_send: tcp_send failed </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: ERROR:tm:t_forward_nonack: sending request failed </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif"> </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Appears at least 20 000 times; and in the day of the last shared memory errors, it was 225.794 times in the log file (note that the number in parenthesis is usually 1 or 2, but on that day it
has reached 6):</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 09:01:27 si-…. /usr/local/sbin/openser[13921]: WARNING:core:send2child: no free tcp receiver, connection passed to the leastbusy one (6) </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 09:01:27 si-… /usr/local/sbin/openser[13921]: WARNING:core:send2child: no free tcp receiver, connection passed to the leastbusy one (5) </font></div>
<div><font face="Arial, sans-serif"> </font></div>
<ul style="margin-top: 0pt; margin-bottom: 0pt; margin-left: 18pt; ">
<font face="Times New Roman, serif" size="3">
<li>Certificate validation problems</li></font>
</ul>
<div style="padding-left: 18pt; "><font face="Times New Roman, serif" size="3">TCP traffic is currently significantly increased by some ( appr. 70) clients which failed to validate the TLS certificate. Registration is repeated every 5 sec.</font></div>
<div style="padding-left: 18pt; "><font face="Times New Roman, serif" size="3"> </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Circa 30 thousand per day (on that day, it was 37.162 times in log)</font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:10 si-024lc008 /usr/local/sbin/openser[13801]: ERROR:core:tls_accept: some error in SSL: </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif">Jun 17 04:03:10 si-024lc008 /usr/local/sbin/openser[13801]: ERROR:core:tls_print_errstack: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca </font></div>
<div style="padding-left: 18pt; "><font face="Arial, sans-serif"> </font></div>
<div><font face="Arial, sans-serif" color="#0000FF"> </font></div>
<div><font face="Arial, sans-serif" color="#0000FF"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; ">Mit besten Grüßen | Best regards<font face="Times New Roman, serif" size="3"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; "><b>Albert Munder</b><font face="Times New Roman, serif" size="3"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; ">Robert Bosch GmbH<font face="Times New Roman, serif" size="3">
<br>
</font>IT Systems Engineering (CI/ISE)<font face="Times New Roman, serif" size="3">
<br>
</font>Postfach 30 02 20<font face="Times New Roman, serif" size="3"> <br>
</font>70442 Stuttgart <br>
GERMANY<font face="Times New Roman, serif" size="3"> <br>
</font><a href="www.bosch.com"><font color="#0000FF"><u>www.bosch.com</u></font></a><font face="Times New Roman, serif" size="3"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; ">Tel. +49 711 811-40562<font face="Times New Roman, serif" size="3">
<br>
</font>Fax +49 711 811-5113333<font face="Times New Roman, serif" size="3"> <br>
</font><font color="#0000FF"><u>Albert.Munder@de.bosch.com</u></font><font face="Times New Roman, serif" size="3"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; "><font size="2">Robert Bosch GmbH, Sitz: Stuttgart, Registergericht: Amtsgericht Stuttgart HRB 14000<font face="Times New Roman, serif" size="3">
<br>
</font>Aufsichtsratsvorsitzender: Hermann Scholl; Geschäftsführung: Franz Fehrenbach, Siegfried Dais;<font face="Times New Roman, serif" size="3">
<br>
</font>Bernd Bohr, Wolfgang Chur, Rudolf Colm, Gerhard Kümmel, Wolfgang Malchow, Peter Marks;<font face="Times New Roman, serif" size="3">
<br>
</font>Volkmar Denner, Peter Tyroller.<font face="Times New Roman, serif" size="3"> </font></font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; "><font face="Times New Roman, serif" size="3"> </font></div>
<div style="margin-top: 5pt; margin-bottom: 5pt; "> </div>
</font>
</body>
</html>