RE: [Pound Mailing List] Correct use of Threads for Pound 2.7

Hey guys,

 

Is there a list of the different compatibilities each version is compatible with OpenSSL?

 

Warren

 

From: Scott McKeown [mailto:scott-Oteo70RhwZ77w/[email protected]] 
Sent: Monday, May 08, 2017 11:40 AM
To: Pound Mailing List
Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Hi Guys,

I'm sure Pound v1.x only works with OpenSSL v0.9.x

Can you expand on the error message that you are getting when you try to start pound please.



 

On 8 May 2017 at 16:21, Emilio Campos <[email protected]> wrote:

libcrypto is used for ssl support, execute ldd in order to check the path that pound binary searches for libcrypto.

 

Here my ldd output for my production pound:

 

 ldd $PATH_TO_POUND/pound
        linux-vdso.so.1 (0x00007fff8eb2a000)
        libssl.so.1.0.0 => not found
        libcrypto.so.1.0.0 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007f8101668000)
        libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f8101450000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f8101248000)
        libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f8100f40000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f8100d20000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f8100980000)
        /lib64/ld-linux-x86-64.so.2 (0x000055f5a3a09000)
 
If there is some issue with linked libs also you will show with this command.
it seems like pound can't find libcrypto in /lib/ if your libcrypto is in another path then try with a symlink. 
 

 

2017-05-08 17:10 GMT+02:00 Warren Perdue <wperdue-V3Zkrsg/[email protected]>:

Hi Emilio and Aaron;

 

I finally recompiled by Pound in line with Blackfin uClinux and it compiled great. I had to revert back to Pound 1.0.7k. But now I am having an issue with it not loading Libcrypto.so.1.0.0. 

 

If I remove the libcrypto file it says when I try to run Pound:

Pound: can’t load library ‘libcrypto.so.1.0.0’

 

If I upload libcrypto.so.1.0.0, I get the following and do chmod 777 on it:

pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’

pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’

pound: can’t load library ‘libcrypto.so.1.0.0’

 

Any ideas?

 

Warren

 

 

From: Emilio Campos [mailto:[email protected]] 
Sent: Monday, May 08, 2017 9:26 AM
To: [email protected]


Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

--with-ssl is configured in compilation time and it is related with openssl libs. 

 

On the other hand is your pound using 4000 Threads all the time? I ask because we have made test in our lab and we realised that pound was 2-5% faster in thread dynamic than static, not appreciated really, so I think dynamic method is better if you are running pound in a server where other apps are running too because this memory will be released if pound doesn't require more threads. 

 

 

 

 

 

2017-05-04 20:04 GMT+02:00 Warren Perdue <wperdue-V3Zkrsg/[email protected]>:

 

Hi Aaron,

 

Finally got every working again and here are the results:

 

#pound –V

Starting…

Version 2.7

Configuration switches:

--disable-super

--enable-cert1l

--with-ssl=/home/jarvis/blkacfin/uclinux/staging/openssl10/usr

--with-dh=2048

Exiting…

 

#pound ulimit –n

Starting…

 

Bad flag –n

 

When goes to look at that with-ssl= line, where is it looking or what is it looking for? Is that just for build/compile purposes or does that point to a specific directory looking for specific files?

 

Warren

 

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 3:59 PM


To: wperdue-V3Zkrsg/[email protected]; [email protected]
Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Ah! That suggests you are running 2.0 which is fairly old(2006ish) so much will have changed.

 

Where did you get pound from? Your distro?




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:+44%20330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 20:56, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

All I get is Version 2.0

Exiting…

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 3:54 PM
To: wperdue-V3Zkrsg/[email protected]; [email protected]


Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Can I also compare the output of "pound -V", mine shows:

 

starting...

detect_tproxy(): tproxy is is detected

tproxy: available

Version 2.7

  Configuration switches:

    --enable-cert1l

    --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/

    --with-maxbuf=4096

    --with-dh=2048

Exiting...

 

My config looks like this:

 

User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000 ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers "ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES 256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES" SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 Disable SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port 80 End End End




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 20:19, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

Hey Aaron,

 

Thank you for responding to my email. I am trying to limit the amount of threads to less than 10. I am working on a new protocol and Pound is my encryption and decryption software. I have not touched the “ulimit –n” yet. My config file is the simple config file. 

 

Threads 8

TimeOut 5

Grace 5

 

ListenHTTPS

     Address 192.168.1.5

     Port    443

     Cert    "/etc/pound/sign.pem"

     Service

           BackEnd

                  Address 192.168.1.80

                  Port 80

           End

     End

End

 

For whatever reason, I cannot get ulimit –n to run. Just like my Pound 2.7 doesn’t recognize Threads, Alive, Grace and several other commands. Pound is compiled and runs and recognizes the encryption and controls the backend perfect and also controls both HTTP and HTTPS transferring to back backend. It also will handle Pound PEMs and transfer cert information to my OpenSSL as a second layer of encryption and security. But for whatever reason my config will not recognize any of the globals commands in this  link. So I am not sure what is going on but I am not sure where to go form here.

 

https://linux.die.net/man/8/pound

 

 

 

From: Aaron West [mailto:aaron-Oteo70RhwZ77w/[email protected]] 
Sent: Wednesday, May 03, 2017 2:02 PM
To: [email protected]; wperdue-V3Zkrsg/[email protected]
Subject: Re: [Pound Mailing List] Correct use of Threads for Pound 2.7

 

Sorry I mean "ulimit -n" not "unlimit...".




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 18:57, Aaron West <aaron-Oteo70RhwZ77w/[email protected]> wrote:

Hi Warren,

 

Yes, I've had threads at about 4000 or so, I don't have a config to hand but I'm fairly sure you need to increase the ulimit to about twice the desired threads and then simply add the threads directive with a number and you're set.

 

Can we see your config and an output of "unlimit -n" for the user running pound, out of interest I believe the default for pound is 128 without the threads directive even set.




Aaron West

 

Loadbalancer.org Limited

+44 (0)330 380 1064 <tel:0330%20380%201064> 
 <http://www.loadbalancer.org/> www.loadbalancer.org

 

On 3 May 2017 at 16:22, Warren Perdue <wperdue-V3Zkrsg/[email protected]> wrote:

Hey guys,

 

Does anyone have an example of a pound.cfg properly using Threads?

I have been trying to get my Thread limitation to work and Pound 2.7 does like Threads 100 or any thread implementation. Have any of you used Pound’s Thread command and if so did it work and if you could include an example of the .cfg file utilizing Threads?

 

Warren 

 

 

 

 





 

-- 

Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): zenloadbalancer-support-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org





 

-- 

Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): zenloadbalancer-support-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org




-- 

With Kind Regards.

Scott McKeown
Loadbalancer.org
http://www.loadbalancer.org

Tel (UK) - +44 (0) 3303801064 (24x7)

Tel (US) - +1 888.867.9504 (Toll Free)(24x7)