Hi,
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time. Perhaps the most easy way is limit the amount of fd's per process with ulimit. However, depending on how many fd's are needed per connection it is difficult to set right now. Kind Regards,
Reinoud.
Koornstra, Reinoud" koornstra@hp.com wrote:
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time.
Normally there are only two file descriptors used by each thread: one for the sockets towards the client and one for the socket towards the server. Additional descriptors may be used at creating of a new connection, e.g. to perform OCSP check or to validate username with ident protocol.
Best regards, Mike
Thanks for your answer. I am looking from the server perspective. A client makes a connection towards the server, when a client connects the master pid spwans a stunnel thread, hence it needs a fd for that and one for the socket towards the client? Kind Regards,
Reinoud.
-----Original Message----- From: stunnel-users-bounces@mirt.net [mailto:stunnel-users-bounces@mirt.net] On Behalf Of Michal Trojnara Sent: Friday, November 21, 2008 6:01 AM To: stunnel-users@mirt.net Subject: Re: [stunnel-users] Amount of FD's per connection
Koornstra, Reinoud" koornstra@hp.com wrote:
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time.
Normally there are only two file descriptors used by each thread: one for the sockets towards the client and one for the socket towards the server. Additional descriptors may be used at creating of a new connection, e.g. to perform OCSP check or to validate username with ident protocol.
Best regards, Mike
_______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users
-
Koornstra, Reinoud -
Michal Trojnara