[SR-Users] Recommended openSSL version

Karsten Horsmann khorsmann at gmail.com
Wed Jun 22 18:11:39 CEST 2022


Hi Igor,

I also use CentOS 7 with the same openssl version and between 1000 up to
2000 tls/wss connections.

Works for me. Main difference I use Kamailio 5.5.x

Kind regards
Karsten Horsmann

Igor Olhovskiy <igorolhovskiy at gmail.com> schrieb am Mi., 22. Juni 2022,
10:36:

> Hello!
>
> Due to I still experience irregular Kamailio 5.4 crashes (like 1/month)
> related to SSL (using websockets and SIPS) I'm wondering, could openSSL
> upgrade change the situation?
> As of now in CentOS 7 I have 1.0.2k version.
>
> Does anyone have experience to fix crash-related to TLS problems with
> openSSL upgrade?
>
> Or maye some tuneup of TCP parameters can help here?My current setup is
> quite simple:
>
> children=4
> enable_tls=yes
> tcp_accept_no_cl=yes
> tcp_connection_lifetime=600
> tcp_max_connections=998976 # 1000000 - 1024, so we're leaving 1k for
> system reserve
> tls_max_connections=998976
>
> Number of clients ~ 200 constantly connected to websocket.
> --
> Best regards,
> Igor
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220622/e2fa08d5/attachment.htm>


More information about the sr-users mailing list