[erlang-questions] Memory consumption in ssl application (OTP-18.3.1)

vicbaz@REDACTED vicbaz@REDACTED
Thu Apr 28 17:57:27 CEST 2016


It seems that my assumption for the first question is correct.

https://github.com/erlang/otp/blob/OTP-18.3.2/lib/ssl/src/ssl_session.erl#L94
https://github.com/erlang/otp/blob/OTP-18.3.2/lib/ssl/src/ssl_session.erl#L114

The session_cb could be set to an "empty" implementation to completely
disable the cache.

https://github.com/erlang/otp/blob/OTP-18.3.2/lib/ssl/src/ssl_manager.erl#L241

28/04/16 13:36, vicbaz@REDACTED пишет:
> Hello,
>
> Could you please clarify one moment. Is the ssl session cache used only
> when reuse_sessions is set to true? Is there a way to turn off the cache
> completely? I'm trying to figure out what settings are needed for
> thousands of short-lived connections.
>
> 28/04/16 12:21, Ingela Andin пишет:
>> Hi!
>>
>>
>> 2016-04-27 15:44 GMT+02:00 <vicbaz@REDACTED <mailto:vicbaz@REDACTED>>:
>>
>>     Hello,
>>
>>     The reason was session_cache_server_max (defaults to 1000).
>>     The ssl_manager quickly get filled by
>>
>>     {'$gen_cast',{invalidate_session,8443,{session,<<...>>,...}}}
>>     {delayed_clean_session,{8443,<<14,50,229,...>>},40986}
>>
>>     messages.
>>
>> I see, we will looking into mitigating this effect.
>>
>> Regards Ingela Erlang/OTP team - Ericsson AB
>>
>>
>>
>>     27/04/16 13:29, Ingela Andin пишет:
>>
>>         Hi!
>>
>>         You could try using the  observer application to find out more
>>         information about your system state.
>>         There is no apparent reason why ssl-7.3 should consume a lot
>>         more memory
>>         than ssl-6.0.1.2.
>>         But a lot has append between the versions and heavy load may
>>         find corner
>>         cases that where missed.
>>
>>         Regards Ingela Erlang/OTP Team - Ericsson AB
>>
>>
>>         2016-04-25 14:35 GMT+02:00 <vicbaz@REDACTED
>>         <mailto:vicbaz@REDACTED> <mailto:vicbaz@REDACTED
>>         <mailto:vicbaz@REDACTED>>>:
>>
>>
>>              Hello,
>>
>>              When I run
>>
>> https://github.com/ninenines/cowboy/tree/1.0.4/examples/ssl_hello_world
>>              under load (using https://github.com/JoeDog/siege) I found
>>         a big
>>              difference in memory consumption between OTP-17.5 and
>>         OTP-18.3. I know
>>              the ssl application has many changes in new versions. Is
>>         this memory
>>              usage normal now or can be reduced using some ssl
>>         application settings?
>>
>>              I use OTP-17.5.6.9 and OTP-18.3.1.
>>
>>
>>
>> ================================================================================
>>
>>              Erlang/OTP 17 [erts-6.4.1.6] [source] [64-bit] [smp:2:2]
>>              [async-threads:10] [hipe] [kernel-poll:false]
>>
>>              1> application:which_applications().
>>              [{ssl_hello_world,"Cowboy Hello World example with SSL.",
>>                                 "1"},
>>                {cowboy,"Small, fast, modular HTTP server.","1.0.4"},
>>                {ranch,"Socket acceptor pool for TCP protocols.","1.2.1"},
>>                {cowlib,"Support library for manipulating Web protocols.",
>>                        "1.0.2"},
>>                {ssl,"Erlang/OTP SSL application","6.0.1.2"},
>>                {public_key,"Public key infrastructure","0.23"},
>>                {crypto,"CRYPTO","3.5"},
>>                {asn1,"The Erlang ASN1 compiler version 3.0.4","3.0.4"},
>>                {stdlib,"ERTS  CXC 138 10","2.4"},
>>                {kernel,"ERTS  CXC 138 10","3.2.0.1"}]
>>
>>              2> erlang:memory().
>>              [{total,43913840},
>>                {processes,8036312},
>>                {processes_used,8030744},
>>                {system,35877528},
>>                {atom,470537},
>>                {atom_used,455904},
>>                {binary,1498800},
>>                {code,11074476},
>>                {ets,14516424}]
>>
>>              3> recon_alloc:memory(used).
>>              45519464
>>
>>              4> recon_alloc:memory(usage).
>>              0.7212344918526264
>>
>>              5> recon:proc_window(memory, 10, 500).
>>              [{<0.25910.2>,68120,
>>                 [{current_function,{gen_fsm,loop,7}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.25908.2>,68120,
>>                 [{current_function,{gen_fsm,loop,7}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.284.0>,15808,
>>                 [ssl_manager,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.285.0>,12712,
>>                 [tls_connection_sup,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.25909.2>,5888,
>>                 [{current_function,{gen,do_call,4}},
>>                  {initial_call,{cowboy_protocol,init,4}}]},
>>                {<0.324.0>,4888,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.302.0>,4808,
>>                 [{current_function,{ranch_conns_sup,loop,4}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.330.0>,3016,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.25911.2>,2848,
>>                 [{current_function,{gen,do_call,4}},
>>                  {initial_call,{cowboy_protocol,init,4}}]},
>>                {<0.340.0>,1872,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]}]
>>
>>              6> recon:proc_window(reductions, 10, 500).
>>              [{<0.2634.3>,11161,
>>                 [{current_function,{gen_fsm,loop,7}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.2633.3>,9747,
>>                 [{current_function,{crypto,int_to_bin_pos,2}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.284.0>,4097,
>>                 [ssl_manager,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.285.0>,3314,
>>                 [tls_connection_sup,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.302.0>,1003,
>>                 [{current_function,{ranch_conns_sup,loop,4}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.378.0>,426,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.372.0>,425,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.379.0>,425,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.377.0>,425,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.343.0>,425,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]}]
>>
>>              RES in htop ~50-60M
>>
>>
>>
>> ================================================================================
>>
>>
>>              Erlang/OTP 18 [erts-7.3.1] [source] [64-bit] [smp:2:2]
>>              [async-threads:10] [hipe] [kernel-poll:false]
>>
>>              1> application:which_applications().
>>              [{ssl_hello_world,"Cowboy Hello World example with SSL.",
>>                                 "1"},
>>                {cowboy,"Small, fast, modular HTTP server.","1.0.4"},
>>                {ranch,"Socket acceptor pool for TCP protocols.","1.2.1"},
>>                {cowlib,"Support library for manipulating Web protocols.",
>>                        "1.0.2"},
>>                {ssl,"Erlang/OTP SSL application","7.3"},
>>                {public_key,"Public key infrastructure","1.1.1"},
>>                {crypto,"CRYPTO","3.6.3"},
>>                {asn1,"The Erlang ASN1 compiler version 4.0.2","4.0.2"},
>>                {recon,"Diagnostic tools for production use","2.3.1"},
>>                {stdlib,"ERTS  CXC 138 10","2.8"},
>>                {kernel,"ERTS  CXC 138 10","4.2"}]
>>
>>              2> erlang:memory().
>>              [{total,949153560},
>>                {processes,902969888},
>>                {processes_used,902558312},
>>                {system,46183672},
>>                {atom,437761},
>>                {atom_used,432875},
>>                {binary,48320},
>>                {code,11407283},
>>                {ets,883640}]
>>
>>              3> recon_alloc:memory(used).
>>              863194560
>>
>>              4> recon_alloc:memory(usage).
>>              0.8005009562139471
>>
>>              5> recon:proc_window(memory, 10, 500).
>>              [{<0.290.0>,94360,
>>                 [ssl_manager,
>>                  {current_function,{ssl_manager,handle_cast,2}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.13589.3>,24640,
>>                 [{current_function,{ssl_manager,validate_session,3}},
>>                  {initial_call,{ssl_manager,init_session_validator,1}}]},
>>                {<0.291.0>,12832,
>>                 [tls_connection_sup,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.13590.3>,10960,
>>                 [{current_function,{gen,do_call,4}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.318.0>,7904,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.308.0>,3056,
>>                 [{current_function,{ranch_conns_sup,loop,4}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.385.0>,1872,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.254.0>,0,
>>                 [code_server,
>>                  {current_function,{code_server,loop,1}},
>>                  {initial_call,{erlang,apply,2}}]},
>>                {<0.325.0>,0,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.357.0>,0,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]}]
>>
>>              6> recon:proc_window(reductions, 10, 500).
>>              [{<0.290.0>,232358,
>>                 [ssl_manager,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.291.0>,3058,
>>                 [tls_connection_sup,
>>                  {current_function,{gen_server,loop,6}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.308.0>,1129,
>>                 [{current_function,{ranch_conns_sup,loop,4}},
>>                  {initial_call,{proc_lib,init_p,5}}]},
>>                {<0.339.0>,435,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.340.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.355.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.353.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.334.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.366.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]},
>>                {<0.360.0>,430,
>>                 [{current_function,{prim_inet,accept0,2}},
>>                  {initial_call,{ranch_acceptor,loop,3}}]}]
>>
>>              RES in htop ~900-1000M
>>              _______________________________________________
>>              erlang-questions mailing list
>>         erlang-questions@REDACTED <mailto:erlang-questions@REDACTED>
>>         <mailto:erlang-questions@REDACTED
>>         <mailto:erlang-questions@REDACTED>>
>>         http://erlang.org/mailman/listinfo/erlang-questions
>>
>>
>>



More information about the erlang-questions mailing list