[OpenSIPS-Users] Opensips stops responding to TLS

[Răzvan Crainea]

Hello!

Does it stop to any TLS operation, even for new ones? What TLS lib are 
you using, openssl or wolfssl?
Are there any errors in the logs related to TLS?

Best regards,

Răzvan Crainea
OpenSIPS Core Developer
http://www.opensips-solutions.com

On 12/30/22 16:00, L S wrote:
> One more thing:
> 
> log_level=4
> open_files_limit=32768
> 
> At the time Opensips stops responding to TLS, it seems like it stops 
> writing to log file too even though it continues handling the non-TLS SIP.
> 
> Thanks.
> 
> On Thu, Dec 29, 2022, 5:51 PM L S <efes99999 at gmail.com 
> <mailto:efes99999 at gmail.com>> wrote:
> 
>     Just wanted to add the traffic between the client and Opensips
>     below. It seems Opensips keeps on sending RESET.
> 
>     We have the tcp_max_connections at default value. That value (2048)
>     works fine in 1.11.5.
> 
>     Thanks.
> 
>     client opensipsSSL142Client Hello
>     client opensipsSSL142[TCP Retransmission] Client Hello
>     opensipsclient TCP54sips > 5071 [RST] Seq=1 Win=0 Len=0
>     client opensipsSSL142[TCP Retransmission] Client Hello
>     opensipsclient TCP54sips > 5064 [RST] Seq=1 Win=0 Len=0
>     client opensipsTCP74[TCP Port numbers reused] 5071 > sips [SYN]
>     Seq=0 Win=8192 Len=0 MSS=1460 WS=1
>     opensipsclient TCP54sips > 5071 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
>     client opensipsTCP74[TCP Port numbers reused] 5064 > sips [SYN]
>     Seq=0 Win=8192 Len=0 MSS=1460 WS=1
>     opensipsclient TCP54sips > 5064 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
>     client opensipsTCP74[TCP Port numbers reused] 5080 > sips [SYN]
>     Seq=0 Win=8192 Len=0 MSS=1460 WS=1
> 
>     On Thu, Dec 29, 2022, 9:27 AM L S <efes99999 at gmail.com
>     <mailto:efes99999 at gmail.com>> wrote:
> 
>         Hi,
> 
>         We are in the process of migrating from 1.11.5 tls to 3.2.9, and
>         we are running into an issue with TLS.
> 
>         Opensips stops handling TLS within a few minutes after it is
>         started; e.g. stops responding to Client Hellos. There is no
>         more outgoing TLS traffic from the Opensips server. When we
>         restart Opensips, it goes back to normal for a while, then stops
>         responding to TLS requests again.
> 
>         I don't see any errors in logs.
>         The server runs Centos 7,  openssl 1.1.1q.
> 
>         1.11.5 works fine.
> 
>         Can this be a memory issue? We use S_memory 512 and P_memory 8.
>         Opensips 1.11.5 works fine with the same settings. TCP
>         parameters have their default values.
> 
>         How can we debug this? Any suggestions would be appreciated.
> 
>         Thanks,
>         Matt
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users