[stunnel-users] Problem in Stunnel with too many connections

Tue Nov 28 16:24:13 CET 2006

Hi Dan,

Thanks for your input. Here's some more info -

- I'm using Stunnel version 4.16 on Windows Server 2003 Standard. I
downloaded the binaries.

- I had logs at level 7 ON but they're HUGE so I can't attach them here.
What I can tell is that
when the server exited, there was no message logged to suggest that there
was a problem.
The server was just going through the negotiations with a client when it
died.

- Log at startup time says  "No limit detected for number of clients" .

- There are messages that say  "Connection rejected: create_client failed"
and
   "readsocket: Connection reset by peer (WSAECONNRESET) (10054)" but i
don't think they're doing anything to shut the server down.

I have not been able to locate where to increase the no. of max FDs on
windows. Please let
me know if you do.

I'm going through the Stunnel source code. I came across the function where
limits are set.
What I could derive is that for a windows based system there is no limit set
to FDs and clients (function get-limits in stunnel.c). Does it mean that
limits are governed by Windows settings
in this case ?

Please respond back with whatever you can help !!

Thanks n Regards,

Kunal

On 11/26/06, Dan Milne <d at nmilne.com> wrote:
>
> Hi there,    What's the maximum number of open file descriptors for your
> OS? Limits of 1024 is normal  - you might be hitting that.
>
>
>    Running ulimit -n should allow you to check and set that value.
>
>
> Dan
>
>
>
>  On 26/11/2006, at 14:51 , ~ Kunal Sharma ~ wrote:
>
>  Hi Friends,
>
> I've just joined this group. I would take this as an oppurtunity to
> discuss a problem I've
> been facing in using Stunnel.
>
> I've been using Stunnel for quite some time now. It has worked very well
> all this while.
> Recently, I had to shift our webserver onto the Internet and Stunnel
> accepts the https
> connections on the server's behalf.
>
> The problem is there are about 4.5 million clients out there in the field
> and there's a client
> coming up to the server atleast every second, if not less. Stunnel accepts
> the connections
> and after a while (like an hour) it just dies ! I see that at a point
> there are about 950 active
> connections and thats the maximum I could see before it dies.
>
> Could someone help me diagnose the problem (or better to fix it)
> - Is there any performance related issue thats a known problem and I don't
> know of ?
> - What I can look at to see what could be the possible cause ?
> - I haven't had a chance to look at the logs yet. Probably they might tell
> me something.
> - Any other pointers / inputs / suggestions would be heartily welcome.
>
> I've not been to my office so I won't be able to attach the necessary
> information like
> the version of stunnel, the logs, configuration options etc. But promise
> to send them as
> soon as I'm back on Monday after Thanksgiving.
>
> Thanks and Regards,
> Kunal
>
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
>
>
>  ---
> Dan Milne d at nmilne.com
> http://politiwiki.kicks-ass.net/
>
>
>
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20061128/bd8ba53f/attachment.html>