Article delegate-en/446 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]

Newsgroups: mail-lists.delegate-en

[DeleGate-En] Problems with DeleGate 5.9.1 + FreeBSD 2.2.8-STABLE + SSLway "CANNOT FORK"
14 May 1999 09:26:07 GMT pxmaqbdyi-ytjem4zpqmlr.ml@ml.delegate.org


Dear Sir,

I am writing to ask your help with problems with DeleGate 5.9.1 on a
moderately loaded FreeBSD 2.2.8-STABLE proxy server.

The problem is that either SSL connections fail or don't transport any data.

The top program shows the server CPU idle more than 80% of the time. There
doesn't
 appear to be a shortage of real or virtual memory.

Here are the delegate log messages :-


05/14 13:56:47.61 [25024] 443+0: disconnected [17]
-@[203.32.183.226]retina.oznetcity
.com.au:2390 (0.796s)(0)
05/14 13:56:48.81 [25024] 443+0: CFI process remaining (1/1)
05/14 13:56:49.87 [2874] 444+0: CANNOT FORK
05/14 13:57:39.43 [2874] 445+0: CANNOT FORK
05/14 13:57:49.45 [2874] 446+0: CANNOT FORK
05/14 13:57:59.48 [2874] 447+0: CANNOT FORK
05/14 13:58:09.51 [2874] 448+0: CANNOT FORK
05/14 13:58:19.54 [2874] 449+0: CANNOT FORK
05/14 13:58:50.67 [2874] 450+0: CANNOT FORK
05/14 13:59:43.88 [2874] 451+0: CANNOT FORK
05/14 13:59:53.93 [2874] 452+0: CANNOT FORK
05/14 14:00:29.37 [2874] 453+0: CANNOT FORK
05/14 14:00:49.91 [2874] 454+0: CANNOT FORK
05/14 14:01:05.37 [2874] 455+0: CANNOT FORK
05/14 14:01:15.41 [25236] 456+0: -- Fork(OnetimeServer): 2874 -> 25236
05/14 14:01:15.66 [25236] 456+0: (0) accepted [17]
-@[202.14.186.30]Pericles.IPAustra
lia.gov.au:3858 (0.252s)(1)

Here is the Delegate configuration

#!/bin/sh
HERE=`pwd`
export SSL_SERVER_KEY_FILE; SSL_SERVER_KEY_FILE=$HERE/server-key.pem
export SSL_SERVER_CERT_FILE; SSL_SERVER_CERT_FILE=$HERE/server-cert.pem
$HERE/src/delegated \
        -PPericles.IPAustralia.gov.au:443 \
        RELIABLE="*" \
        DGROOT=/usr/local/delegate \
        SERVER=https \
        MOUNT="/* http://external/*" \
        FCL="$HERE/filters/sslway -ac"

When other CPU and memory intensive processing was stopped (squid), the DeleGate
 started
to perform better. I am not aware of any failures since stopping squid. Starting
 squid again
seemed also to not impact DeleGate.

Your commenst will be gratefully accepted.

Thank you,

Yours sincerely.



  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V