[OpenSIPS-Users] Long reload time for mi tls_reload for 200 tls/ssl certs

[Denys Pozniak]

Hello!

There is a task to divide a single tls/ssl letsencrypt certificate for
white labels into specific ones.
I entered about ~250 certificates into db_text, but as it turned out, for
OpenSIPS this is a rather complex operation to load them and takes about 1
minute and a heavy CPU load is noticeable.

I would appreciate any advice on how to avoid this.

# wc -l dbtext/tls_mgm
253 dbtext/tls_mgm

# time opensips-cli -x mi tls_reload
"OK"
real 0m52.034s
user 0m1.419s
sys 0m0.433s

# time systemctl restart opensips
real    0m58.198s
user    0m0.024s
sys     0m0.055s

# opensips -V
version: opensips 3.4.4 (x86_64/linux)
flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC,
F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16,
MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll, sigio_rt, select.
git revision: 036d02961

-- 

BR,
Denys Pozniak
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20240502/f2d78f4d/attachment.html>