On 07/03/2021 22:28, Gert Doering wrote:
Hi,On Sun, Mar 07, 2021 at 02:20:32PM -0500, Selva Nair wrote:That's another possible angle... just up soft+hard to "something" (how much would that be? :-) ) and log the fact.Rereading my comment on Trac #1059 I recall testing this and concluding 100MB enough for clients. On modern machines that's a low amount of memory --- not allowing swapout of 100MB should be acceptable. For servers, I think there is no reliable limit that we could come up with.This is interesting. My machines, including servers, have a way lower memory usage - but I'm not using EC. Here's a linux server with 3 peers and a client (arm32): USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14569 0.0 0.5 5704 2980 ? Ss 2020 12:31 openvpn root 21020 0.1 0.5 5568 3040 ? Ss 2020 454:45 openvpn Here's a FreeBSD server that serves 5 clients right now, but has peaks up to 150 concurrent clients (amd64) USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 5023 0.3 0.1 30924 23172 - Ss 20Dec20 1945:07.12 /usr/local/sbin/openvpn --cd /usr/local/etc/openvpn --daemon ... and another two Linux server instances... USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1138 2.1 1.3 26732 10628 ? Ss 2019 21678:18 /usr/sbin/openvpn root 2897 0.8 0.9 29548 7080 ? Ss 2019 8596:15 /usr/sbin/openvpn the last 3 see a high number of clients during work time, and quite some churn (especially due to iOS/android connecting and disconnecting frequently), but long-term memory usage is not high. So there must be some massive transient usage due to EC at reconnection time...
FWIW .... A couple of my CentOS 8.3 servers with 2 client connections running 24/7. * Server 1 USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND openvpn 3437979 0.0 0.1 76360 2924 ? Ss Feb25 2:19 /usr/sbin/openvpn * Server 2 USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND openvpn 2805670 0.0 0.8 76624 6896 ? Ss Feb25 7:08 /usr/sbin/openvpn The start date is from when openvpn-2.5.1 got released and updated. OpenSSL 1.1.1g-12 is used on both hosts. -- kind regards, David Sommerseth OpenVPN Inc
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
