You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by "Neddy, NH. Nam" <na...@nd24.net> on 2012/06/16 07:05:16 UTC

Re: ATS 3.2 CPU utilization

Add dev

This is the longer output of truss
http://pastebin.com/7sA5qAfp

On Sat, Jun 16, 2012 at 11:29 AM, Neddy, NH. Nam <na...@nd24.net> wrote:
> Hi,
>
> I'm testing ATS 3.2 on fresh dual core computer, OpenIndiana 151a4 OS.
> After started, CPU load is always at 2.37, 2.32, 2.32, neither idle
> nor working.
>
> # prstat
>
> PID USERNAME  SIZE   RSS STATE  PRI NICE      TIME  CPU PROCESS/NLWP
>  21338 nobody    244M   85M cpu0    54    0  10:21:45  20% traffic_server/21
>  21335 root       13M 9260K sleep   59    0   0:01:48 0.1% traffic_manager/8
>
> and
>
> # truss -p 21338
>
> part of output could be seen here: http://pastebin.com/ZRzMXBvi
>
> Could somebody help to solve problem, please?
>
> --
> Best regards,
> Hai Nam, Nguyen



-- 
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
Sorry, I accidentally entered this thread ...

Opened new one...

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 4:15 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

I am just trying to understand how ssl connection can take place when using transparent proxy.

Do I need to intercept the traffic with iptables just like I did for port 80 ? 

Do I need to configure something else in records.config? 

It's pretty urgent , I would really appreciate it if someone can help me ? 

Thanks,
Jacob

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 3:19 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get "the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/ Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net]
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



--
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
Sorry, I accidentally entered this thread ...

Opened new one...

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 4:15 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

I am just trying to understand how ssl connection can take place when using transparent proxy.

Do I need to intercept the traffic with iptables just like I did for port 80 ? 

Do I need to configure something else in records.config? 

It's pretty urgent , I would really appreciate it if someone can help me ? 

Thanks,
Jacob

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 3:19 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get "the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/ Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net]
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



--
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
I am just trying to understand how ssl connection can take place when using transparent proxy.

Do I need to intercept the traffic with iptables just like I did for port 80 ? 

Do I need to configure something else in records.config? 

It's pretty urgent , I would really appreciate it if someone can help me ? 

Thanks,
Jacob

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 3:19 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get "the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/ Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net]
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



--
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
I am just trying to understand how ssl connection can take place when using transparent proxy.

Do I need to intercept the traffic with iptables just like I did for port 80 ? 

Do I need to configure something else in records.config? 

It's pretty urgent , I would really appreciate it if someone can help me ? 

Thanks,
Jacob

-----Original Message-----
From: Jacov Koren [mailto:Jacov.Koren@commtouch.com] 
Sent: Sunday, June 17, 2012 3:19 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: RE: ATS 3.2 CPU utilization

What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get "the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/ Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net]
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



--
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get 
"the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/
Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net] 
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



-- 
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
What do you mean? 

I have a set up with ATS as a transparent proxy, I can access web pages..

But when I try to access sites with https I get 
"the connection was interrupted" 

On wget I get a different message - 

[root@perfclient1 ~]# wget https://173.194.41.149
--2012-06-17 10:55:37--  https://173.194.41.149/
Connecting to 173.194.41.149:443... connected.
OpenSSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Unable to establish SSL connection.
 

-----Original Message-----
From: Neddy, NH. Nam [mailto:nam.nh@nd24.net] 
Sent: Sunday, June 17, 2012 3:07 PM
To: users@trafficserver.apache.org
Cc: dev@trafficserver.apache.org
Subject: Re: ATS 3.2 CPU utilization

It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



-- 
Best regards,
Hai Nam, Nguyen

Re: ATS 3.2 CPU utilization

Posted by "Neddy, NH. Nam" <na...@nd24.net>.
It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



-- 
Best regards,
Hai Nam, Nguyen

Re: ATS 3.2 CPU utilization

Posted by "Neddy, NH. Nam" <na...@nd24.net>.
It's only configured as forward proxy.

On Sun, Jun 17, 2012 at 7:03 PM, Jacov Koren <Ja...@commtouch.com> wrote:
> Is there a problem configuring ATS to support SSL connection on transparent mode ?



-- 
Best regards,
Hai Nam, Nguyen

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
Is there a problem configuring ATS to support SSL connection on transparent mode ? 

RE: ATS 3.2 CPU utilization

Posted by Jacov Koren <Ja...@commtouch.com>.
Is there a problem configuring ATS to support SSL connection on transparent mode ?