Hi, I'm using stunnel 4.22 with OpenSSL 0.9.7m - I am using 4.22 because of the xforwarded-for patch and 4.27 is not supported.
I am running stunnel in standalone mode on a P4 3.2Ghz with 1Gb of Ram. When I start haproxy & stunnel after a reboot, free memory starts at about 750Mb then slowly degrades to about 45Mb. After 8 more hours or so of operation our site was completely unbrowsable. I checked our firewall for unusual traffic, and there were none.
Running top does not indicate any processes which are consuming all that memory and that is what I find weid. Only a reboot frees up the memory. Should I be running stunnel on more Ram?
stunnel -v output: [root@lb1 ~]# stunnel -version stunnel 4.22 on x86_64-unknown-linux-gnu with OpenSSL 0.9.7m 23 Feb 2007 Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Global options debug = 5 pid = /usr/local/var/run/stunnel/stunnel.pid RNDbytes = 64 RNDfile = /dev/urandom RNDoverwrite = yes Service-level options cert = /usr/local/etc/stunnel/stunnel.pem ciphers = ALL:!aNULL:!eNULL+RC4:@STRENGTH key = /usr/local/etc/stunnel/stunnel.pem session = 300 seconds stack = 65536 bytes sslVersion = SSLv3 for client, all for server TIMEOUTbusy = 300 seconds TIMEOUTclose = 60 seconds TIMEOUTconnect = 10 seconds TIMEOUTidle = 43200 seconds verify = none stunnel.conf: #setuid=stunnel #setgid=proxy #debug = 3 #output = /var/log/stunnel.log socket=l:TCP_NODELAY=1 socket=r:TCP_NODELAY=1 [https] accept=10.0.1.50:443 connect=10.0.1.50:80 TIMEOUTclose=0 xforwardedfor=yes