Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

Aaron West <aaron-Oteo70RhwZ77w/[email protected]> Wed, 3 May 2017 20:53:54 +0100
Newsgroups gmane.comp.web.pound.general
Message-ID <[email protected]>
Can I also compare the output of "pound -V", mine shows:

starting...
detect_tproxy(): tproxy is is detected
tproxy: available
Version 2.7
  Configuration switches:
    --enable-cert1l
    --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/
    --with-maxbuf=4096
    --with-dh=2048
Exiting...

My config looks like this:

User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000
ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/
loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers
"ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES
256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES"
SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 Disable
SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port 80 End End
End

Aaron West

Loadbalancer.org Limited
+44 (0)330 380 1064
www.loadbalancer.org

On 3 May 2017 at 20:19, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

> Hey Aaron,
>
>
>
> Thank you for responding to my email. I am trying to limit the amount of
> threads to less than 10. I am working on a new protocol and Pound is my
> encryption and decryption software. I have not touched the “ulimit –n” yet.
> My config file is the simple config file.
>
>
>
> Threads 8
>
> TimeOut 5
>
> Grace 5
>
>
>
> ListenHTTPS
>
>      Address 192.168.1.5
>
>      Port    443
>
>      Cert    "/etc/pound/sign.pem"
>
>      Service
>
>            BackEnd
>
>                   Address 192.168.1.80
>
>                   Port 80
>
>            End
>
>      End
>
> End
>
>
>
> For whatever reason, I cannot get ulimit –n to run. Just like my Pound 2.7
> doesn’t recognize Threads, Alive, Grace and several other commands. Pound
> is compiled and runs and recognizes the encryption and controls the backend
> perfect and also controls both HTTP and HTTPS transferring to back backend.
> It also will handle Pound PEMs and transfer cert information to my OpenSSL
> as a second layer of encryption and security. But for whatever reason my
> config will not recognize any of the globals commands in this  link. So I
> am not sure what is going on but I am not sure where to go form here.
>
>
>
> https://linux.die.net/man/8/pound
>
>
>
>
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 2:02 PM
> *To:* [email protected]; wperdue-V3Zkrsg/[email protected]
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Sorry I mean "ulimit -n" not "unlimit...".
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 18:57, Aaron West <aaron-Oteo70RhwZ77w/[email protected]> wrote:
>
> Hi Warren,
>
>
>
> Yes, I've had threads at about 4000 or so, I don't have a config to hand
> but I'm fairly sure you need to increase the ulimit to about twice the
> desired threads and then simply add the threads directive with a number and
> you're set.
>
>
>
> Can we see your config and an output of "unlimit -n" for the user running
> pound, out of interest I believe the default for pound is 128 without the
> threads directive even set.
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 16:22, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> Hey guys,
>
>
>
> Does anyone have an example of a pound.cfg properly using Threads?
>
> I have been trying to get my Thread limitation to work and Pound 2.7 does
> like Threads 100 or any thread implementation. Have any of you used Pound’s
> Thread command and if so did it work and if you could include an example of
> the .cfg file utilizing Threads?
>
>
>
> Warren
>
>
>
>
>