[SR-Users] Huge TLS performance regression migrating from 3.3.7 to 4.2.6

[Daniel-Constantin Mierla]

Hello,

is the same operating system and server, or are you using some other
machine for the new version? I can't remember right now any big change
in tcp/tls side, besides sni, which should not have any relevant impact
as described here.

Also, have you installed from git branch 4.2 or the tarball/packages of
4.2.6?

Cheers,
Daniel

On 15/10/15 03:36, Tristan Mahé wrote:
> Hi List,
>
> I've been reaching a strange thing lately, trying to upgrade to kamailio
> 4.2.6 ( identical config ):
>
> - 35% loss of performance on TLS connections ( Sipp REGISTER scenario,
> easily reproduced ).
> - more TCP workers needed to ease the TCP queues ( 32 workers on 3.3.7,
> at least 64 are needed on 4.2.6 to avoid "queue full" messages in logs ).
> - kamailio 4.2.6 intermittent processing of requests ( Kamailio stops
> accepting new tcp connections, then resume a bit later, then stops
> again,... ) => starts happening when Kamailio is treating more than 20k
> tcp connections, with between 500-1k req/s. During those periods, trying
> to connect to kamailio with an openssl s_client -connect will end up in
> a timeout or with a long delay before the certificate is received ( 03
> CONNECTED ).
> - kamailio 4.2.6 dropping connections, kamailio 3.3.7 keeping those
> connections: after a while, the number of active connections starts to
> decrease on kam4, on kam3 it stays constant.
>
> I was wondering if I was alone in this situation or if someone else is
> impacted, has some advices ?
>
> It does not seem to be a config issue, as it is the same that was
> deployed with both versions.
>
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Book: SIP Routing With Kamailio - http://www.asipto.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20151015/6eeb26fc/attachment.html>