4 messages in ru.sysoev.nginxRe: SSL Memory Usage and Fragmentation
FromSent OnAttachments
Ben MaurerDec 26, 2007 9:34 am.patch
Igor SysoevDec 26, 2007 10:22 am 
Ben MaurerDec 26, 2007 10:49 am 
Igor SysoevDec 26, 2007 12:20 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: SSL Memory Usage and FragmentationActions...
From:Igor Sysoev (is-G@public.gmane.org)
Date:Dec 26, 2007 12:20:57 pm
List:ru.sysoev.nginx

On Wed, Dec 26, 2007 at 01:49:52PM -0500, Ben Maurer wrote:

Hi,

Igor Sysoev wrote:

On Wed, Dec 26, 2007 at 12:34:39PM -0500, Ben Maurer wrote:

It seems like it might be worth switching to something like the shared memory cache by default. Keeping the long-lived session cache in a different pool of memory avoids the risk of large amounts of memory getting pinned in.

Well, I will make shared session cache by default. It seems it's quite stable. Other possible drawback of builtin cache as I think: it uses a hash to store sessions and cache cleaning may take a long time.

It might be worth having an option to disable the cache completely -- right now all you can do is have a very small builtin cache. I have a configuration where caching is pretty rare (in most cases, we only serve 2 http requests to a user over a single keepalive connection).

Well, I have added

ssl_session_cache off;

and made it by default, as Apache mod_ssl does.

-- Igor Sysoev http://sysoev.ru/en/