[OpenSIPS-Users] Opensips stops responding to TLS

[L S]

One more thing:

log_level=4
open_files_limit=32768

At the time Opensips stops responding to TLS, it seems like it stops
writing to log file too even though it continues handling the non-TLS SIP.

Thanks.

On Thu, Dec 29, 2022, 5:51 PM L S <efes99999 at gmail.com> wrote:

> Just wanted to add the traffic between the client and Opensips below. It
> seems Opensips keeps on sending RESET.
>
> We have the tcp_max_connections at default value. That value (2048) works
> fine in 1.11.5.
>
> Thanks.
>
> client    opensips SSL 142 Client Hello
> client    opensips SSL 142 [TCP Retransmission] Client Hello
> opensips client    TCP 54 sips > 5071 [RST] Seq=1 Win=0 Len=0
> client    opensips SSL 142 [TCP Retransmission] Client Hello
> opensips client    TCP 54 sips > 5064 [RST] Seq=1 Win=0 Len=0
> client    opensips TCP 74 [TCP Port numbers reused] 5071 > sips [SYN]
> Seq=0 Win=8192 Len=0 MSS=1460 WS=1
> opensips client    TCP 54 sips > 5071 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
> client    opensips TCP 74 [TCP Port numbers reused] 5064 > sips [SYN]
> Seq=0 Win=8192 Len=0 MSS=1460 WS=1
> opensips client    TCP 54 sips > 5064 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
> client    opensips TCP 74 [TCP Port numbers reused] 5080 > sips [SYN]
> Seq=0 Win=8192 Len=0 MSS=1460 WS=1
>
> On Thu, Dec 29, 2022, 9:27 AM L S <efes99999 at gmail.com> wrote:
>
>> Hi,
>>
>> We are in the process of migrating from 1.11.5 tls to 3.2.9, and we are
>> running into an issue with TLS.
>>
>> Opensips stops handling TLS within a few minutes after it is started;
>> e.g. stops responding to Client Hellos. There is no more outgoing TLS
>> traffic from the Opensips server. When we restart Opensips, it goes back to
>> normal for a while, then stops responding to TLS requests again.
>>
>> I don't see any errors in logs.
>> The server runs Centos 7,  openssl 1.1.1q.
>>
>> 1.11.5 works fine.
>>
>> Can this be a memory issue? We use S_memory 512 and P_memory 8. Opensips
>> 1.11.5 works fine with the same settings. TCP parameters have their default
>> values.
>>
>> How can we debug this? Any suggestions would be appreciated.
>>
>> Thanks,
>> Matt
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20221230/a89aa644/attachment.html>