Welcome! Log In Create A New Profile

Advanced

Re: ssl cache pooling ? (kind of)

Maxim Dounin
March 22, 2014 05:48PM
Hello!

On Sat, Mar 22, 2014 at 12:28:16PM -0400, Larry wrote:

> Hello,
>
> I would like to know if we could replicate the shared memory over multiple
> servers.
>
> One cannot reliably use the new ticket system since not all webbrowsers
> support this.
>
> My idea is to modify the ngx_shared_memory_add function to add a rpc stack
> to it.
>
> We would write down the upstream servers we want to make aware of the
> modification and send them the cache value.
>
> The only remaining question is how to make a corresponding with the mmap.
>
> Is there a corresponding logic directly between the ssl handshake and the
> place in memory choosen ?
> Are there any restrictions ?
>
> Basically it would be a full replication of the cache on every server, but
> allowing dynamic allocation so that every server remains independant.
>
> Since this does not consume that much of resources, we can easily allocate
> even 50Mo for the shared memory without any fear.
>
> Before I start coding, I would like to know if there are any mistakes in
> the idea. I may have missed something huge.
>
> Did I ?

You may have better luck adding replication logic to the session
cache.

The idea of replication of shared memory looks utterly broken, in
particular as there are pointers stored in shared memory (take a
look at ngx_ssl_new_session() for details).

--
Maxim Dounin
http://nginx.org/

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

ssl cache pooling ? (kind of)

Larry March 22, 2014 12:28PM

Re: ssl cache pooling ? (kind of)

Maxim Dounin March 22, 2014 05:48PM

Re: ssl cache pooling ? (kind of)

Larry March 23, 2014 06:50AM

Re: ssl cache pooling ? (kind of)

Maxim Dounin March 23, 2014 10:20AM

Re: ssl cache pooling ? (kind of)

Larry March 24, 2014 04:18AM

Re: ssl cache pooling ? (kind of)

Larry March 24, 2014 07:01AM

Re: ssl cache pooling ? (kind of)

Maxim Dounin March 24, 2014 09:12AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 295
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready