[SR-Users] Recommended openSSL version

Karsten Horsmann khorsmann at gmail.com
Thu Jun 23 16:46:06 CEST 2022


Hi Igor,

I jumped from 5.3 to 5.5.x so I read carefull the changelog and migrate
steps.

https://www.kamailio.org/wiki/features/new-in-5.5.x

Show a bit about tls.

Igor Olhovskiy <igorolhovskiy at gmail.com> schrieb am Mi., 22. Juni 2022,
21:08:

> Karsten,
>
> Thanks for your answer!
>
> Out of your head, were there any significant changes in TCP/TLS on 5.4 ->
> 5.5 change?
>
> Regards,
> Igor
>
> Le 22.06.2022 à 18:11, Karsten Horsmann a écrit :
>
> Hi Igor,
>
> I also use CentOS 7 with the same openssl version and between 1000 up to
> 2000 tls/wss connections.
>
> Works for me. Main difference I use Kamailio 5.5.x
>
> Kind regards
> Karsten Horsmann
>
> Igor Olhovskiy <igorolhovskiy at gmail.com> schrieb am Mi., 22. Juni 2022,
> 10:36:
>
>> Hello!
>>
>> Due to I still experience irregular Kamailio 5.4 crashes (like 1/month)
>> related to SSL (using websockets and SIPS) I'm wondering, could openSSL
>> upgrade change the situation?
>> As of now in CentOS 7 I have 1.0.2k version.
>>
>> Does anyone have experience to fix crash-related to TLS problems with
>> openSSL upgrade?
>>
>> Or maye some tuneup of TCP parameters can help here?My current setup is
>> quite simple:
>>
>> children=4
>> enable_tls=yes
>> tcp_accept_no_cl=yes
>> tcp_connection_lifetime=600
>> tcp_max_connections=998976 # 1000000 - 1024, so we're leaving 1k for
>> system reserve
>> tls_max_connections=998976
>>
>> Number of clients ~ 200 constantly connected to websocket.
>> --
>> Best regards,
>> Igor
>> __________________________________________________________
>> Kamailio - Users Mailing List - Non Commercial Discussions
>>   * sr-users at lists.kamailio.org
>> Important: keep the mailing list in the recipients, do not reply only to
>> the sender!
>> Edit mailing list options or unsubscribe:
>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220623/9bf7e774/attachment.htm>


More information about the sr-users mailing list