Hi Guys, I'm sure Pound v1.x only works with OpenSSL v0.9.x Can you expand on the error message that you are getting when you try to start pound please.
On 8 May 2017 at 16:21, Emilio Campos <[email protected]> wrote: > libcrypto is used for ssl support, execute ldd in order to check the path > that pound binary searches for libcrypto. > > Here my ldd output for my production pound: > > ldd $PATH_TO_POUND/pound > linux-vdso.so.1 (0x00007fff8eb2a000) > libssl.so.1.0.0 => not found* libcrypto.so.1.0.0 => > /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007f8101668000)* > libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 > (0x00007f8101450000) > libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f8101248000) > libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f8100f40000) > libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 > (0x00007f8100d20000) > libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f8100980000) > /lib64/ld-linux-x86-64.so.2 (0x000055f5a3a09000) > > > If there is some issue with linked libs also you will show with this command. > > it seems like pound can't find libcrypto in /lib/ if your libcrypto is in > another path then try with a symlink. > > > > 2017-05-08 17:10 GMT+02:00 Warren Perdue <[email protected]>: > >> Hi Emilio and Aaron; >> >> >> >> I finally recompiled by Pound in line with Blackfin uClinux and it >> compiled great. I had to revert back to Pound 1.0.7k. But now I am having >> an issue with it not loading Libcrypto.so.1.0.0. >> >> >> >> If I remove the libcrypto file it says when I try to run Pound: >> >> Pound: can’t load library ‘libcrypto.so.1.0.0’ >> >> >> >> If I upload libcrypto.so.1.0.0, I get the following and do chmod 777 on >> it: >> >> pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’ >> >> pound:582: can’t map ‘/lib/libcrypto.so.1.0.0’ >> >> pound: can’t load library ‘libcrypto.so.1.0.0’ >> >> >> >> Any ideas? >> >> >> >> Warren >> >> >> >> >> >> *From:* Emilio Campos [mailto:[email protected]] >> *Sent:* Monday, May 08, 2017 9:26 AM >> *To:* [email protected] >> >> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7 >> >> >> >> --with-ssl is configured in compilation time and it is related with >> openssl libs. >> >> >> >> On the other hand is your pound using 4000 Threads all the time? I ask >> because we have made test in our lab and we realised that pound was 2-5% >> faster in thread dynamic than static, not appreciated really, so I think >> dynamic method is better if you are running pound in a server where other >> apps are running too because this memory will be released if pound doesn't >> require more threads. >> >> >> >> >> >> >> >> >> >> >> >> 2017-05-04 20:04 GMT+02:00 Warren Perdue <[email protected]>: >> >> >> >> Hi Aaron, >> >> >> >> Finally got every working again and here are the results: >> >> >> >> #pound –V >> >> Starting… >> >> Version 2.7 >> >> Configuration switches: >> >> --disable-super >> >> --enable-cert1l >> >> --with-ssl=/home/jarvis/blkacfin/uclinux/staging/openssl10/usr >> >> --with-dh=2048 >> >> Exiting… >> >> >> >> #pound ulimit –n >> >> Starting… >> >> >> >> Bad flag –n >> >> >> >> When goes to look at that with-ssl= line, where is it looking or what is >> it looking for? Is that just for build/compile purposes or does that point >> to a specific directory looking for specific files? >> >> >> >> Warren >> >> >> >> >> >> *From:* Aaron West [mailto:[email protected]] >> *Sent:* Wednesday, May 03, 2017 3:59 PM >> >> >> *To:* [email protected]; [email protected] >> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7 >> >> >> >> Ah! That suggests you are running 2.0 which is fairly old(2006ish) so >> much will have changed. >> >> >> >> Where did you get pound from? Your distro? >> >> >> Aaron West >> >> >> >> Loadbalancer.org Limited >> >> +44 (0)330 380 1064 <+44%20330%20380%201064> >> www.loadbalancer.org >> >> >> >> On 3 May 2017 at 20:56, Warren Perdue <[email protected]> wrote: >> >> All I get is Version 2.0 >> >> Exiting… >> >> >> >> *From:* Aaron West [mailto:[email protected]] >> *Sent:* Wednesday, May 03, 2017 3:54 PM >> *To:* [email protected]; [email protected] >> >> >> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7 >> >> >> >> Can I also compare the output of "pound -V", mine shows: >> >> >> >> starting... >> >> detect_tproxy(): tproxy is is detected >> >> tproxy: available >> >> Version 2.7 >> >> Configuration switches: >> >> --enable-cert1l >> >> --with-ssl=/usr/src/binaries/OpenSSL_1_0_1q-no_march/usr/local/ >> >> --with-maxbuf=4096 >> >> --with-dh=2048 >> >> Exiting... >> >> >> >> My config looks like this: >> >> >> >> User "nobody" Group "nobody" LogLevel 0 Client 30 Timeout 60 Threads 4000 >> ListenHTTPS # Label: TEST Address 172.16.200.114 Port 443 Cert "/etc/ >> loadbalancer.org/certs/server.pem" ReWriteLocation 1 Ciphers >> "ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA- >> AES256-SHA:AES128-GCM-SHA256:AES 256-SHA256:AES128-SHA256:AES25 >> 6-SHA:AES128-SHA:DHE-RSA-AES256-SHA256!RC4:!MD5:!aNULL:!EDH:!3DES" >> SSLHonorCipherOrder 1 SSLAllowClientRenegotiation 0 Disable SSLv2 >> Disable SSLv3 Disable TLSv1 Service BackEnd Address 172.16.200.108 Port >> 80 End End End >> >> >> Aaron West >> >> >> >> Loadbalancer.org Limited >> >> +44 (0)330 380 1064 <0330%20380%201064> >> www.loadbalancer.org >> >> >> >> On 3 May 2017 at 20:19, Warren Perdue <[email protected]> wrote: >> >> Hey Aaron, >> >> >> >> Thank you for responding to my email. I am trying to limit the amount of >> threads to less than 10. I am working on a new protocol and Pound is my >> encryption and decryption software. I have not touched the “ulimit –n” yet. >> My config file is the simple config file. >> >> >> >> Threads 8 >> >> TimeOut 5 >> >> Grace 5 >> >> >> >> ListenHTTPS >> >> Address 192.168.1.5 >> >> Port 443 >> >> Cert "/etc/pound/sign.pem" >> >> Service >> >> BackEnd >> >> Address 192.168.1.80 >> >> Port 80 >> >> End >> >> End >> >> End >> >> >> >> For whatever reason, I cannot get ulimit –n to run. Just like my Pound >> 2.7 doesn’t recognize Threads, Alive, Grace and several other commands. >> Pound is compiled and runs and recognizes the encryption and controls the >> backend perfect and also controls both HTTP and HTTPS transferring to back >> backend. It also will handle Pound PEMs and transfer cert information to my >> OpenSSL as a second layer of encryption and security. But for whatever >> reason my config will not recognize any of the globals commands in this >> link. So I am not sure what is going on but I am not sure where to go form >> here. >> >> >> >> https://linux.die.net/man/8/pound >> >> >> >> >> >> >> >> *From:* Aaron West [mailto:[email protected]] >> *Sent:* Wednesday, May 03, 2017 2:02 PM >> *To:* [email protected]; [email protected] >> *Subject:* Re: [Pound Mailing List] Correct use of Threads for Pound 2.7 >> >> >> >> Sorry I mean "ulimit -n" not "unlimit...". >> >> >> Aaron West >> >> >> >> Loadbalancer.org Limited >> >> +44 (0)330 380 1064 <0330%20380%201064> >> www.loadbalancer.org >> >> >> >> On 3 May 2017 at 18:57, Aaron West <[email protected]> wrote: >> >> Hi Warren, >> >> >> >> Yes, I've had threads at about 4000 or so, I don't have a config to hand >> but I'm fairly sure you need to increase the ulimit to about twice the >> desired threads and then simply add the threads directive with a number and >> you're set. >> >> >> >> Can we see your config and an output of "unlimit -n" for the user running >> pound, out of interest I believe the default for pound is 128 without the >> threads directive even set. >> >> >> Aaron West >> >> >> >> Loadbalancer.org Limited >> >> +44 (0)330 380 1064 <0330%20380%201064> >> www.loadbalancer.org >> >> >> >> On 3 May 2017 at 16:22, Warren Perdue <[email protected]> wrote: >> >> Hey guys, >> >> >> >> Does anyone have an example of a pound.cfg properly using Threads? >> >> I have been trying to get my Thread limitation to work and Pound 2.7 does >> like Threads 100 or any thread implementation. Have any of you used Pound’s >> Thread command and if so did it work and if you could include an example of >> the .cfg file utilizing Threads? >> >> >> >> Warren >> >> >> >> >> >> >> >> >> >> >> >> >> >> -- >> >> Load balancer distribution - Open Source Project >> http://www.zenloadbalancer.com >> Distribution list (subscribe): zenloadbalancer-support@lists. >> sourceforge.net >> > > > > -- > Load balancer distribution - Open Source Project > http://www.zenloadbalancer.com > Distribution list (subscribe): zenloadbalancer-support@lists. > sourceforge.net > -- With Kind Regards. Scott McKeown Loadbalancer.org http://www.loadbalancer.org Tel (UK) - +44 (0) 3303801064 (24x7) Tel (US) - +1 888.867.9504 (Toll Free)(24x7)
