Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

libcrypto is used for ssl support, execute ldd in order to check the path
that pound binary searches for libcrypto.

Here my ldd output for my production pound:

 ldd $PATH_TO_POUND/pound
	linux-vdso.so.1 (0x00007fff8eb2a000)
	libssl.so.1.0.0 => not found*	libcrypto.so.1.0.0 =>
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007f8101668000)*
	libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f8101450000)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f8101248000)
	libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f8100f40000)
	libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f8100d20000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f8100980000)
	/lib64/ld-linux-x86-64.so.2 (0x000055f5a3a09000)


If there is some issue with linked libs also you will show with this command.

it seems like pound can't find libcrypto in /lib/ if your libcrypto is
in another path then try with a symlink.



2017-05-08 17:10 GMT+02:00 Warren Perdue <wperdue-V3Zkrsg/[email protected]>:

> Hi Emilio and Aaron;
>
>
>
> I finally recompiled by Pound in line with Blackfin uClinux and it
> compiled great. I had to revert back to Pound 1.0.7k. But now I am having
> an issue with it not loading Libcrypto.so.1.0.0.
>
>
>
> If I remove the libcrypto file it says when I try to run Pound:
>
> Pound: can’t load library ‘libcrypto.so.1.0.0’
>
>
>
> If I upload libcrypto.so.1.0.0, I get the following and do chmod 777 on it:
>
> pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’
>
> pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’
>
> pound: can’t load library ‘libcrypto.so.1.0.0’
>
>
>
> Any ideas?
>
>
>
> Warren
>
>
>
>
>
> *From:* Emilio Campos [mailto:[email protected]]
> *Sent:* Monday, May 08, 2017 9:26 AM
> *To:* [email protected]
>
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> --with-ssl is configured in compilation time and it is related with
> openssl libs.
>
>
>
> On the other hand is your pound using 4000 Threads all the time? I ask
> because we have made test in our lab and we realised that pound was 2-5%
> faster in thread dynamic than static, not appreciated really, so I think
> dynamic method is better if you are running pound in a server where other
> apps are running too because this memory will be released if pound doesn't
> require more threads.
>
>
>
>
>
>
>
>
>
>
>
> 2017-05-04 20:04 GMT+02:00 Warren Perdue <wperdue-V3Zkrsg/[email protected]>:
>
>
>
> Hi Aaron,
>
>
>
> Finally got every working again and here are the results:
>
>
>
> #pound –V
>
> Starting…
>
> Version 2.7
>
> Configuration switches:
>
> --disable-super
>
> --enable-cert1l
>
> --with-ssl=/home/jarvis/blkacfin/uclinux/staging/openssl10/usr
>
> --with-dh=2048
>
> Exiting…
>
>
>
> #pound ulimit –n
>
> Starting…
>
>
>
> Bad flag –n
>
>
>
> When goes to look at that with-ssl= line, where is it looking or what is
> it looking for? Is that just for build/compile purposes or does that point
> to a specific directory looking for specific files?
>
>
>
> Warren
>
>
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 3:59 PM
>
>
> *To:* wperdue-V3Zkrsg/[email protected]; [email protected]
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Ah! That suggests you are running 2.0 which is fairly old(2006ish) so much
> will have changed.
>
>
>
> Where did you get pound from? Your distro?
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <+44%20330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 20:56, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> All I get is Version 2.0
>
> Exiting…
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 3:54 PM
> *To:* wperdue-V3Zkrsg/[email protected]; [email protected]
>
>
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Can I also compare the output of "pound -V", mine shows:
>
>
>
> starting...
>
> detect_tproxy(): tproxy is is detected
>
> tproxy: available
>
> Version 2.7
>
>   Configuration switches:
>
>     --enable-cert1l
>
>     --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/
>
>     --with-maxbuf=4096
>
>     --with-dh=2048
>
> Exiting...
>
>
>
> My config looks like this:
>
>
>
> User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000
> ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/
> loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers
> "ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-
> RSA-AES256-SHA:AES128-GCM-SHA256:AES 256-SHA256:AES128-SHA256:
> AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES"
> SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 Disable
> SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port 80 End
> End End
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 20:19, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> Hey Aaron,
>
>
>
> Thank you for responding to my email. I am trying to limit the amount of
> threads to less than 10. I am working on a new protocol and Pound is my
> encryption and decryption software. I have not touched the “ulimit –n” yet.
> My config file is the simple config file.
>
>
>
> Threads 8
>
> TimeOut 5
>
> Grace 5
>
>
>
> ListenHTTPS
>
>      Address 192.168.1.5
>
>      Port    443
>
>      Cert    "/etc/pound/sign.pem"
>
>      Service
>
>            BackEnd
>
>                   Address 192.168.1.80
>
>                   Port 80
>
>            End
>
>      End
>
> End
>
>
>
> For whatever reason, I cannot get ulimit –n to run. Just like my Pound 2.7
> doesn’t recognize Threads, Alive, Grace and several other commands. Pound
> is compiled and runs and recognizes the encryption and controls the backend
> perfect and also controls both HTTP and HTTPS transferring to back backend.
> It also will handle Pound PEMs and transfer cert information to my OpenSSL
> as a second layer of encryption and security. But for whatever reason my
> config will not recognize any of the globals commands in this  link. So I
> am not sure what is going on but I am not sure where to go form here.
>
>
>
> https://linux.die.net/man/8/pound
>
>
>
>
>
>
>
> *From:* Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]]
> *Sent:* Wednesday, May 03, 2017 2:02 PM
> *To:* [email protected]; wperdue-V3Zkrsg/[email protected]
> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7
>
>
>
> Sorry I mean "ulimit -n" not "unlimit...".
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 18:57, Aaron West <aaron-Oteo70RhwZ77w/[email protected]> wrote:
>
> Hi Warren,
>
>
>
> Yes, I've had threads at about 4000 or so, I don't have a config to hand
> but I'm fairly sure you need to increase the ulimit to about twice the
> desired threads and then simply add the threads directive with a number and
> you're set.
>
>
>
> Can we see your config and an output of "unlimit -n" for the user running
> pound, out of interest I believe the default for pound is 128 without the
> threads directive even set.
>
>
> Aaron West
>
>
>
> Loadbalancer.org Limited
>
> +44 (0)330 380 1064 <0330%20380%201064>
> www.loadbalancer.org
>
>
>
> On 3 May 2017 at 16:22, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:
>
> Hey guys,
>
>
>
> Does anyone have an example of a pound.cfg properly using Threads?
>
> I have been trying to get my Thread limitation to work and Pound 2.7 does
> like Threads 100 or any thread implementation. Have any of you used Pound’s
> Thread command and if so did it work and if you could include an example of
> the .cfg file utilizing Threads?
>
>
>
> Warren
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
>
> Load balancer distribution - Open Source Project
> http://www.zenloadbalancer.com
> Distribution list (subscribe): zenloadbalancer-support@lists.
> sourceforge.net
>



-- 
Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): zenloadbalancer-support-5NWGOfrQmneRv+LV9MX5uv+2+P5yyue3@public.gmane.orgt