[SR-Users] Recommended openSSL version

[Igor Olhovskiy]

Karsten,

Thanks for your answer!

Out of your head, were there any significant changes in TCP/TLS on 5.4 
-> 5.5 change?

Regards,
Igor

Le 22.06.2022 à 18:11, Karsten Horsmann a écrit :
> Hi Igor,
>
> I also use CentOS 7 with the same openssl version and between 1000 up 
> to 2000 tls/wss connections.
>
> Works for me. Main difference I use Kamailio 5.5.x
>
> Kind regards
> Karsten Horsmann
>
> Igor Olhovskiy <igorolhovskiy at gmail.com> schrieb am Mi., 22. Juni 
> 2022, 10:36:
>
>     Hello!
>
>     Due to I still experience irregular Kamailio 5.4 crashes (like
>     1/month) related to SSL (using websockets and SIPS) I'm wondering,
>     could openSSL upgrade change the situation?
>     As of now in CentOS 7 I have 1.0.2k version.
>
>     Does anyone have experience to fix crash-related to TLS problems
>     with openSSL upgrade?
>
>     Or maye some tuneup of TCP parameters can help here?My current
>     setup is quite simple:
>
>     children=4
>     enable_tls=yes
>     tcp_accept_no_cl=yes
>     tcp_connection_lifetime=600
>     tcp_max_connections=998976 # 1000000 - 1024, so we're leaving 1k
>     for system reserve
>     tls_max_connections=998976
>
>     Number of clients ~ 200 constantly connected to websocket.
>     -- 
>     Best regards,
>     Igor
>     __________________________________________________________
>     Kamailio - Users Mailing List - Non Commercial Discussions
>       * sr-users at lists.kamailio.org
>     Important: keep the mailing list in the recipients, do not reply
>     only to the sender!
>     Edit mailing list options or unsubscribe:
>       * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>    *sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to the sender!
> Edit mailing list options or unsubscribe:
>    *https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220622/1ceaeb03/attachment.htm>