[zorp] Connection limit in SSL?

Balazs Scheidler bazsi at balabit.hu
Tue Jul 29 09:08:45 CEST 2008


On Mon, 2008-07-28 at 15:27 +0200, thomas.wenz at gmx-topmail.de wrote:
> Hi,
> 
> Perhaps Zorp Pro normally uses 63 or more threads? Because at this value, fd_limit becomes negative and then it isn't used in the execve command anymore because there's a check for
> if (inst->fd_limit > 0)
> However, if "threads" is set to 44-62 it can't even start the proxy because of "too many open files" and requests are only possible with "threads" set to 39 or less (could depend a little bit on how many libraries are called). The value for fd_limit_threshold and fd_limit_min actually can be set in the zorpctl.conf but warnings are thrown because they are obsolete:
> z_error(0, "The use of FD_LIMIT_THRESHOLD and FD_LIMIT_MIN in zorpctl.conf is deprecated, use zorp options with a similar name\n");

The reason we didn't notice is that the management GUI generates an
--fd-limit option by default.

Nevertheless, thanks for noticing this.

-- 
Bazsi



More information about the zorp mailing list