Another leak: tls_new_client_session

Alan DeKok aland at deployingradius.com
Wed Mar 4 19:28:50 CET 2015


On Mar 4, 2015, at 1:13 PM, Stefan Paetow <Stefan.Paetow at jisc.ac.uk> wrote:
> Just by the way... The old head of 3.0.x yesterday saw the RSS of the FR process grow by 2276K, today's (with your fix in), I see a growth of 356K.

  That’s better.

> Does that sound credible?

  Yes.  TBH, I have no idea how large the OpenSSL structures are, other than “OMG huge”.

> The system is being hit by one TLS-based Moonshot auth every 5 minutes. I'll leave it running for the next 12 hours or so (like I did the old head). I'll report back tomorrow. 

  Thanks.

  Alan DeKok.




More information about the Freeradius-Devel mailing list