Re: [SR-Users] Recommended openSSL version

Karsten,

Thanks for your answer!

Out of your head, were there any significant changes in TCP/TLS on 5.4 -> 5.5 change?

Regards, Igor

Le 22.06.2022 à 18:11, Karsten Horsmann a écrit :

Hi Igor,

I also use CentOS 7 with the same openssl version and between 1000 up to 2000 tls/wss connections.

Works for me. Main difference I use Kamailio 5.5.x

Kind regards Karsten Horsmann

Igor Olhovskiy igorolhovskiy@gmail.com schrieb am Mi., 22. Juni 2022, 10:36:

Hello!

Due to I still experience irregular Kamailio 5.4 crashes (like
1/month) related to SSL (using websockets and SIPS) I'm wondering,
could openSSL upgrade change the situation?
As of now in CentOS 7 I have 1.0.2k version.

Does anyone have experience to fix crash-related to TLS problems
with openSSL upgrade?

Or maye some tuneup of TCP parameters can help here?My current
setup is quite simple:

children=4
enable_tls=yes
tcp_accept_no_cl=yes
tcp_connection_lifetime=600
tcp_max_connections=998976 # 1000000 - 1024, so we're leaving 1k
for system reserve
tls_max_connections=998976

Number of clients ~ 200 constantly connected to websocket.
-- 
Best regards,
Igor
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply
only to the sender!
Edit mailing list options or unsubscribe:
  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

---

Kamailio - Users Mailing List - Non Commercial Discussions *sr-users@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: *https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users