[OpenSIPS-Users] Long reload time for mi tls_reload for 200 tls/ssl certs

[Bogdan-Andrei Iancu]

Hi,

There is only one trap, ideally you should try to get several during the 
reload time.

Still, the trap you did shows opensips doing some logging (dumping to 
syslog) while reloading - could you check how intensive this logging is 
and eventually to try to disable it (increase the log level of opensips 
lower than INFO) to see if there is any impact?

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
   https://www.opensips-solutions.com
   https://www.siphub.com

On 08.05.2024 14:10, Denys Pozniak wrote:
> Hello!
>
> If possible, please check log:
> https://github.com/denyspozniak/opensips_tls_debug/blob/main/gdb_opensips_20240508_115956
>
>
> ср, 8 мая 2024 г. в 08:55, Bogdan-Andrei Iancu <bogdan at opensips.org>:
>
>     Hi Denys.
>
>     That is rather weird, 250 certificates in 1 min. I assume it is
>     not a DB issue (considering the db_text backend), so can you try
>     to do multiple sequential "opensips-cli -x trap" to try to
>     understand what is going on ?
>
>     Regards,
>
>     Bogdan-Andrei Iancu
>
>     OpenSIPS Founder and Developer
>        https://www.opensips-solutions.com
>        https://www.siphub.com
>
>     On 02.05.2024 11:41, Denys Pozniak wrote:
>>     Hello!
>>
>>     There is a task to divide a single tls/ssl letsencrypt
>>     certificate for white labels into specific ones.
>>     I entered about ~250 certificates into db_text, but as it turned
>>     out, for OpenSIPS this is a rather complex operation to load them
>>     and takes about 1 minute and a heavy CPU load is noticeable.
>>
>>     I would appreciate any advice on how to avoid this.
>>
>>     # wc -l dbtext/tls_mgm
>>     253 dbtext/tls_mgm
>>
>>     # time opensips-cli -x mi tls_reload
>>     "OK"
>>     real 0m52.034s
>>     user 0m1.419s
>>     sys 0m0.433s
>>
>>     # time systemctl restart opensips
>>     real    0m58.198s
>>     user    0m0.024s
>>     sys     0m0.055s
>>
>>     # opensips -V
>>     version: opensips 3.4.4 (x86_64/linux)
>>     flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC,
>>     Q_MALLOC, F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
>>     ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN
>>     16, MAX_URI_SIZE 1024, BUF_SIZE 65535
>>     poll method support: poll, epoll, sigio_rt, select.
>>     git revision: 036d02961
>>
>>     -- 
>>
>>     BR,
>>     Denys Pozniak
>>
>>
>>
>>     _______________________________________________
>>     Users mailing list
>>     Users at lists.opensips.org
>>     http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> -- 
>
> BR,
> Denys Pozniak
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20240508/fe3b6a9d/attachment.html>