[Kamailio-Users] OpenSER stability problems in pilot project

[Edson - Lists]

You report that this pilot is using 1.3.4-TLS. The last available 
version is 1.5.1. Any special reason to use this 'old' version?

A time ago (a month?) someone reported to the list shared memory 
problems... maybe are related... From what I remember upgrade to the 
last SVN was the right solution.

Edson.

Munder Albert (CI/ISE) escreveu:
> Hello,
>  
> Sorry, next try with posting this message. Attempts with attachment 
> failed due to message size.
> We are running OpenSER in a pilot project and unfortunately have some 
> stability problems.
> Any help or hints are appreciated.
>  
> Project information
> OpenSER is used in a pilot project with
> 
>     * Appr. 5000 subscriber accounts
>     * Appr. 1200 simultaneously registered users
>     * Signalling encrypted with TLS
>     * Media data encrypted with SRTP
>     * Clients: softphones and hardphones
>     * Re-registration time for clients:        3600 sec
> 
>  
> OpenSER configuration
> 
>     * Works as stateful SIP Proxy
>     * mySQL database
>     * Version 1.3.4.-TLS
>     * Tcp_children:   100 --> is it recommended to increase this number?
>     * Udp_children:   20
>     * Tcp_connection_timeout: 3600
>     * Shared memory:  
> 
>     * -m 512 when error occurred
>     * Now set to 1024
> 
>  
> *Problems*
> 
>     * Shared memory consumption
> 
> Shared memory usage is permanently increasing (about 50 MB per day)
> Application already crashed twice
>  
> First messages were, these, repeated thousands of times (5915 times):
> Jun 17 08:54:52 si-…. /usr/local/sbin/openser[13921]: 
> ERROR:core:tcpconn_new: shared memory allocation failure
> Jun 17 08:54:52 si-… /usr/local/sbin/openser[13921]: 
> ERROR:core:handle_new_connect: tcpconn_new failed, closing socket
> And a few of these also (7613 times):
> Jun 17 08:57:24 si-… /usr/local/sbin/openser[13880]: 
> ERROR:core:tls_accept: some error in SSL:
> Jun 17 08:57:24 si-… /usr/local/sbin/openser[13880]: 
> ERROR:core:tls_print_errstack: error:1409C041:SSL 
> routines:SSL3_SETUP_BUFFERS:malloc failure
>  
> 
>     * TCP errors, lost SIP messages
> 
>  
> Examples from error messages:
> 14.100 times in log file from 17.06.09
> Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: 
> ERROR:core:tcp_blocking_connect: poll error: flags 18
> Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: 
> ERROR:core:tcp_blocking_connect: failed to retrieve SO_ERROR (111) 
> Connection refused
> Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: 
> ERROR:core:tcpconn_connect: tcp_blocking_connect failed
> Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: 
> ERROR:core:tcp_send: connect failed
> Jun 17 04:03:15 si-.. /usr/local/sbin/openser[13863]: ERROR:tm:msg_send: 
> tcp_send failed
> Jun 17 04:03:15 si-… /usr/local/sbin/openser[13863]: 
> ERROR:tm:t_forward_nonack: sending request failed
>  
> Appears at least 20 000  times; and in the day of the last shared memory 
> errors, it was 225.794 times in the log file (note that the number in 
> parenthesis is usually 1 or 2, but on that day it has reached 6):
> Jun 17 09:01:27 si-…. /usr/local/sbin/openser[13921]: 
> WARNING:core:send2child: no free tcp receiver, connection passed to the 
> leastbusy one (6)
> Jun 17 09:01:27 si-… /usr/local/sbin/openser[13921]: 
> WARNING:core:send2child: no free tcp receiver, connection passed to the 
> leastbusy one (5)
>  
> 
>     * Certificate validation problems
> 
> TCP traffic is currently significantly increased by some ( appr. 70) 
> clients which failed to validate the TLS certificate. Registration is 
> repeated every 5 sec.
>  
> Circa 30 thousand per day (on that day, it was 37.162 times in log)
> Jun 17 04:03:10 si-024lc008 /usr/local/sbin/openser[13801]: 
> ERROR:core:tls_accept: some error in SSL:
> Jun 17 04:03:10 si-024lc008 /usr/local/sbin/openser[13801]: 
> ERROR:core:tls_print_errstack: error:14094418:SSL 
> routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
>  
>  
>  
> Mit besten Grüßen | Best regards
> *Albert Munder*
> Robert Bosch GmbH
> IT Systems Engineering (CI/ISE)
> Postfach 30 02 20
> 70442 Stuttgart
> GERMANY
> _www.bosch.com_
> Tel. +49 711 811-40562
> Fax +49 711 811-5113333
> _Albert.Munder at de.bosch.com_
> Robert Bosch GmbH, Sitz: Stuttgart, Registergericht: Amtsgericht 
> Stuttgart HRB 14000
> Aufsichtsratsvorsitzender: Hermann Scholl; Geschäftsführung: Franz 
> Fehrenbach, Siegfried Dais;
> Bernd Bohr, Wolfgang Chur, Rudolf Colm, Gerhard Kümmel, Wolfgang 
> Malchow, Peter Marks;
> Volkmar Denner, Peter Tyroller.
>  
>  
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Kamailio (OpenSER) - Users mailing list
> Users at lists.kamailio.org
> http://lists.kamailio.org/cgi-bin/mailman/listinfo/users
> http://lists.openser-project.org/cgi-bin/mailman/listinfo/users