Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

--with-ssl is configured in compilation time and it is related with openssl
libs.

On the other hand is your pound using 4000 Threads all the time? I ask
because we have made test in our lab and we realised that pound was 2-5%
faster in thread dynamic than static, not appreciated really, so I think
dynamic method is better if you are running pound in a server where other
apps are running too because this memory will be released if pound doesn't
require more threads.





2017-05-04 20:04 GMT+02:00 Warren Perdue <wperdue-V3Zkrsg/[email protected]>:

>
>
> Hi Aaron,
>
>
>
> Finally got every working again and here are the results:
>
>
>
> #pound –V
>
> Starting…
>
> Version 2.7
>
> Configuration switches:
>
> --disable-super
>
> --enable-cert1l
>
> --with-ssl=/home/jarvis/blkacfin/uclinux/staging/openssl10/usr
>
> --with-dh=2048
>
> Exiting…
>
>
>
> #pound ulimit –n
>
> Starting…
>
>
>
> Bad flag –n
>
>
>
> When goes to look at that with-ssl= line, where is it looking or what is
> it looking for? Is that just for build/compile purposes or does that point
> to a specific directory looking for specific files?
>
>
>
> Warren
>
>
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 3:59 PM
>
> *To:* wperdue-V3Zkrsg/[email protected]; [email protected]
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Ah! That suggests you are running 2.0 which is fairly old(2006ish) so much
> will have changed.
>
>
>
> Where did you get pound from? Your distro?
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <+44%20330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 20:56, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> All I get is Version 2.0
>
> Exiting…
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 3:54 PM
> *To:* wperdue-V3Zkrsg/[email protected]; [email protected]
>
>
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Can I also compare the output of "pound -V", mine shows:
>
>
>
> starting...
>
> detect_tproxy(): tproxy is is detected
>
> tproxy: available
>
> Version 2.7
>
>   Configuration switches:
>
>     --enable-cert1l
>
>     --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/
>
>     --with-maxbuf=4096
>
>     --with-dh=2048
>
> Exiting...
>
>
>
> My config looks like this:
>
>
>
> User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000
> ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/
> loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers
> "ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-
> RSA-AES256-SHA:AES128-GCM-SHA256:AES 256-SHA256:AES128-SHA256:
> AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES"
> SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 Disable
> SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port 80 End
> End End
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 20:19, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> Hey Aaron,
>
>
>
> Thank you for responding to my email. I am trying to limit the amount of
> threads to less than 10. I am working on a new protocol and Pound is my
> encryption and decryption software. I have not touched the “ulimit –n” yet.
> My config file is the simple config file.
>
>
>
> Threads 8
>
> TimeOut 5
>
> Grace 5
>
>
>
> ListenHTTPS
>
>      Address 192.168.1.5
>
>      Port    443
>
>      Cert    "/etc/pound/sign.pem"
>
>      Service
>
>            BackEnd
>
>                   Address 192.168.1.80
>
>                   Port 80
>
>            End
>
>      End
>
> End
>
>
>
> For whatever reason, I cannot get ulimit –n to run. Just like my Pound 2.7
> doesn’t recognize Threads, Alive, Grace and several other commands. Pound
> is compiled and runs and recognizes the encryption and controls the backend
> perfect and also controls both HTTP and HTTPS transferring to back backend.
> It also will handle Pound PEMs and transfer cert information to my OpenSSL
> as a second layer of encryption and security. But for whatever reason my
> config will not recognize any of the globals commands in this  link. So I
> am not sure what is going on but I am not sure where to go form here.
>
>
>
> https://linux.die.net/man/8/pound
>
>
>
>
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 2:02 PM
> *To:* [email protected]; wperdue-V3Zkrsg/[email protected]
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Sorry I mean "ulimit -n" not "unlimit...".
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 18:57, Aaron West <aaron-Oteo70RhwZ77w/[email protected]> wrote:
>
> Hi Warren,
>
>
>
> Yes, I've had threads at about 4000 or so, I don't have a config to hand
> but I'm fairly sure you need to increase the ulimit to about twice the
> desired threads and then simply add the threads directive with a number and
> you're set.
>
>
>
> Can we see your config and an output of "unlimit -n" for the user running
> pound, out of interest I believe the default for pound is 128 without the
> threads directive even set.
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 16:22, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> Hey guys,
>
>
>
> Does anyone have an example of a pound.cfg properly using Threads?
>
> I have been trying to get my Thread limitation to work and Pound 2.7 does
> like Threads 100 or any thread implementation. Have any of you used Pound’s
> Thread command and if so did it work and if you could include an example of
> the .cfg file utilizing Threads?
>
>
>
> Warren
>
>
>
>
>
>
>
>
>



-- 
Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): zenloadbalancer-support-5NWGOfrQmneRv+LV9MX5uv+2+P5yyue3@public.gmane.orgt