Thanks Brian, but no. It's a limit within the prototypes.h file.

Sure, it can be modified and recompiled from source. We just can't deviate from the delivered RPMs on the distro, and it may take a while for modifications to be backported and mainlined in RHEL.

Actually, I see in v4.44 MAX_FD (sorry, I had it reversed) is set to 256. Apparently that value hasn't made it all the way through to RHEL as yet. Just may have to be patient, although a conf file override would be nice.

--Doug

...

Greetings,

We're using stunnel-4.15-2.el5.1 as provided on the RHEL 5 update 7 distro.

Is there any way to override the FD_MAX setting (64 IIRC), perhaps as a stunnel.conf option?

Maybe I'm not understanding the question, but wouldn't "ulimit -n DESIRED_LIMIT" do the trick?

-Brian _______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org http://stunnel.mirt.net/mailman/listinfo/stunnel-users

It's these darn apps that require port ranges of 20+. :) And it's impressive only until you have to modify the config files.

With so many connections I'd prefer to use something like OpenVPN. Unfortunately the destination host is AIX and I've not seen anyone get it built there successfully yet. I've been trying in a lab as time allows, but to say it's slow-going is an understatement.

A dynamic FD list would be sweet, but 256 would suit me just as well. Guess I'll have to wait for it to get backported.

Many thanks!

Doug Eckert wrote: We're using stunnel-4.15-2.el5.1 as provided on the RHEL 5 update 7 distro.

Is there any way to override the FD_MAX setting (64 IIRC), perhaps as a stunnel.conf option?

stunnel.conf with more than 64 sections is pretty impressive...

MAX_FD was increased from 64 to 256 in stunnel 4.16.

I could also rewrite stunnel to remove the limit completely (to dynamically allocate the file descriptor list).

Best regards, Mike