Re: [stunnel-users] Problem in Stunnel with too many connections

--===============0200803038==
Content-Type: multipart/signed; boundary="nextPart1263129.htqVoxxKU5";
protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit

--nextPart1263129.htqVoxxKU5
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Wednesday 29 November 2006 16:56, ~ Kunal Sharma ~ wrote:
> I downloaded Stunnel from stunnel.org and had no idea I have a new version
> at *the home site*.

I see. This page should put some light on it:
http://www.stunnel.org/related/

Brian Hatch, the author of www.stunnel.org web page did a great
job building the page, writing documentation, patches, etc.
Unfortunately he is quite busy nowadays, so the page is becoming
obsolete and misleading.

> But with the same version, I made the change suggested by you
> (TIMEOUTidle =3D 30) and Stunnel has now being working for
> more than 18 hrs on the trot now !!!
>=20
> Can you please explain to me (only if you have time) what magic
> this did ?=20

By default stunnel tries to keep idle (not transferring any traffic)=20
connections up for 43200 seconds (12 hours). It's generally a good idea=20
(imagine a telnet or an irc session). The drawback is that when a client h=
as=20
disconnected without shutting down or resetting TCP session (like it was=20
turned off with the power switch or the the network cable was pulled off)=20
stunnel server uses server resources (like a cpu thread, memory or tcp=20
sockets) for the next 12 hours. That's not good on a heavy loaded server. =
=20
Reducing the idle timeout from 43200 to 30 seconds eliminates this problem.

Best regards,
Mike

--nextPart1263129.htqVoxxKU5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQBFbeqJ/NU+nXTHMtERAkrbAJ9B+4YPuhFipIZsNFE9IhlHLNLX0QCg7PU o
jOzvidlUUTT65ua5leBgGR4=
=gavg
-----END PGP SIGNATURE-----

--nextPart1263129.htqVoxxKU5--

--===============0200803038==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-users mailing list
stunnel-users@mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users

--===============0200803038==--