[OpenSIPS-Users] opensips 3.0.2 100% CPU after enable tls?

William Jin williamj at exetel.com.au
Thu Apr 23 04:04:39 EST 2020


Hi,

Linux platform: Debian 9 (stretch)

opensips -V
version: opensips 3.0.2 (x86_64/linux)
flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll, sigio_rt, select.
main.c compiled on  with gcc 6.3.0

related config:

listen = tls:xxx.xxx.xxx.xxx:5061 anycast


####TLS
loadmodule "tls_mgm.so"
loadmodule "proto_tls.so"

modparam("tls_mgm", "server_domain", "sip1")
modparam("tls_mgm", "match_ip_address", "[sip1]xx.xx.xx.xx:5061")
modparam("tls_mgm", "match_sip_domain", "[sip1]xxx.xxx.example.com")

modparam("tls_mgm", "verify_cert", "[sip1]1")
modparam("tls_mgm", "require_cert", "[sip1]0")
modparam("tls_mgm", "tls_method", "[sip1]SSLv23")
modparam("tls_mgm", "ciphers_list", "[sip1]AES256-GCM-SHA384,AES256-SHA256,AES256-SHA,CAMELLIA256-SHA,AES128-SHA,SEED-SHA,CAMELLIA128-SHA,RC4-SHA,DES-CBC3-SHA")


modparam("tls_mgm", "certificate", "[sip1]/etc/opensips/tls/mycerts/selfsignedcert.pem")
modparam("tls_mgm", "private_key", "[sip1]/etc/opensips/tls/mycerts/unsecuredkey.pem")


opensips-cli -x trap {pid} result attached

Can someone shed some light on it? Thanks.


--
Regards,
William Jin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20200423/fc2488e1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gdb_opensips_20200423_135258
Type: application/octet-stream
Size: 8985 bytes
Desc: gdb_opensips_20200423_135258
URL: <http://lists.opensips.org/pipermail/users/attachments/20200423/fc2488e1/attachment.obj>


More information about the Users mailing list