Browse Source

tls: disable compression by default

Jan proposed to disable compression by default, since his tests showed
that with compression enabled openssl uses ~10x more memory.
For less then 100 connections it doesn't matter so much, but for
larger numbers (e.g. >1000) it really makes a huge difference.
To enable it, use modparam("tls", "tls_disable_compression", 0).

Reported-and-tested-by: Jan Janak <[email protected]>
Andrei Pelinescu-Onciul 15 years ago
parent
commit
817b6fd317
1 changed files with 2 additions and 1 deletions
  1. 2 1
      modules/tls/tls_init.c

+ 2 - 1
modules/tls/tls_init.c

@@ -126,7 +126,8 @@ int openssl_kssl_malloc_bug=0; /* is openssl bug #1467 present ? */
 #endif
 int openssl_mem_threshold1=-1; /* low memory threshold for connect/accept */
 int openssl_mem_threshold2=-1; /* like above but for other tsl operations */
-int tls_disable_compression = 0; /* by default enabled */
+int tls_disable_compression = 1; /* by default disabled due to high memory
+									use (~10x then without compression) */
 int tls_force_run = 0; /* ignore some start-up sanity checks, use it
 						  at your own risk */