Hi,
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time. Perhaps the most easy way is limit the amount of fd's per process with ulimit. However, depending on how many fd's are needed per connection it is difficult to set right now. Kind Regards,
Reinoud.
Koornstra, Reinoud" [email protected] wrote:
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time.
Normally there are only two file descriptors used by each thread: one for the sockets towards the client and one for the socket towards the server. Additional descriptors may be used at creating of a new connection, e.g. to perform OCSP check or to validate username with ident protocol.
Best regards, Mike
Thanks for your answer. I am looking from the server perspective. A client makes a connection towards the server, when a client connects the master pid spwans a stunnel thread, hence it needs a fd for that and one for the socket towards the client? Kind Regards,
Reinoud.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Michal Trojnara Sent: Friday, November 21, 2008 6:01 AM To: [email protected] Subject: Re: [stunnel-users] Amount of FD's per connection
Koornstra, Reinoud" [email protected] wrote:
I am using stunnel compiled to use threads. I read in the faq that a connection may use 1 to 4 fd's per connection. Normally this is only one, how can I influence this, I mean making sure there is one fd per connection? I also wish to limit the amount of max connections at the same time.
Normally there are only two file descriptors used by each thread: one for the sockets towards the client and one for the socket towards the server. Additional descriptors may be used at creating of a new connection, e.g. to perform OCSP check or to validate username with ident protocol.
Best regards, Mike
_______________________________________________ stunnel-users mailing list [email protected] http://stunnel.mirt.net/mailman/listinfo/stunnel-users
-
Koornstra, Reinoud -
Michal Trojnara