RE: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Hi Aaron,

 

Finally got every working again and here are the results:

 

#pound –V

Starting…

Version 2.7

Configuration switches:

--disable-super

--enable-cert1l

--with-ssl=/home/jarvis/blkacfin/uclinux/staging/openssl10/usr

--with-dh=2048

Exiting…

 

#pound ulimit –n

Starting…

 

Bad flag –n

 

When goes to look at that with-ssl= line, where is it looking or what is it looking for? Is that just for build/compile purposes or does that point to a specific directory looking for specific files?

 

Warren

 

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 3:59 PM
To: wperdue-V3Zkrsg/[email protected]; [email protected]
Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Ah! That suggests you are running 2.0 which is fairly old(2006ish) so much will have changed.

 

Where did you get pound from? Your distro?




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 20:56, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

All I get is Version 2.0

Exiting…

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 3:54 PM
To: wperdue-V3Zkrsg/[email protected]; [email protected]


Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Can I also compare the output of "pound -V", mine shows:

 

starting...

detect_tproxy(): tproxy is is detected

tproxy: available

Version 2.7

  Configuration switches:

    --enable-cert1l

    --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/

    --with-maxbuf=4096

    --with-dh=2048

Exiting...

 

My config looks like this:

 

User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000 ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers "ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES 256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES" SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 Disable SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port 80 End End End




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 20:19, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

Hey Aaron,

 

Thank you for responding to my email. I am trying to limit the amount of threads to less than 10. I am working on a new protocol and Pound is my encryption and decryption software. I have not touched the “ulimit –n” yet. My config file is the simple config file. 

 

Threads 8

TimeOut 5

Grace 5

 

ListenHTTPS

     Address 192.168.1.5

     Port    443

     Cert    "/etc/pound/sign.pem"

     Service

           BackEnd

                  Address 192.168.1.80

                  Port 80

           End

     End

End

 

For whatever reason, I cannot get ulimit –n to run. Just like my Pound 2.7 doesn’t recognize Threads, Alive, Grace and several other commands. Pound is compiled and runs and recognizes the encryption and controls the backend perfect and also controls both HTTP and HTTPS transferring to back backend. It also will handle Pound PEMs and transfer cert information to my OpenSSL as a second layer of encryption and security. But for whatever reason my config will not recognize any of the globals commands in this  link. So I am not sure what is going on but I am not sure where to go form here.

 

https://linux.die.net/man/8/pound

 

 

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 2:02 PM
To: [email protected]; wperdue-V3Zkrsg/[email protected]
Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Sorry I mean "ulimit -n" not "unlimit...".




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 18:57, Aaron West <aaron-Oteo70RhwZ77w/[email protected]> wrote:

Hi Warren,

 

Yes, I've had threads at about 4000 or so, I don't have a config to hand but I'm fairly sure you need to increase the ulimit to about twice the desired threads and then simply add the threads directive with a number and you're set.

 

Can we see your config and an output of "unlimit -n" for the user running pound, out of interest I believe the default for pound is 128 without the threads directive even set.




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 16:22, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

Hey guys,

 

Does anyone have an example of a pound.cfg properly using Threads?

I have been trying to get my Thread limitation to work and Pound 2.7 does like Threads 100 or any thread implementation. Have any of you used Pound’s Thread command and if so did it work and if you could include an example of the .cfg file utilizing Threads?

 

Warren