GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 16:57:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

doc: added more info on isolate-workers

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2016-01-20 13:12:37 +01:00
parent 7fcd989d6a
commit d0fc4ce92b
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
doc/sample.config
View File

@@ -145,6 +145,10 @@ ca-cert = ../tests/ca.pem
# system calls allowed to a worker process, in order to reduce damage from a # system calls allowed to a worker process, in order to reduce damage from a
# bug in the worker process. It is available on Linux systems at a performance cost. # bug in the worker process. It is available on Linux systems at a performance cost.
# The performance cost is roughly 2% overhead at transfer time (tested on a Linux 3.17.8). # The performance cost is roughly 2% overhead at transfer time (tested on a Linux 3.17.8).
# Note however, that process isolation is restricted to the specific libc versions
# the isolation was tested at. If you get random failures on worker processes, try
# disabling that option and report the failures you, along with system and debugging
# information at: https://gitlab.com/ocserv/ocserv/issues
isolate-workers = true isolate-workers = true
# A banner to be displayed on clients # A banner to be displayed on clients

4
src/ocserv-args.def
View File

@@ -228,6 +228,10 @@ server-key = /path/to/key.pem
# system calls allowed to a worker process, in order to reduce damage from a # system calls allowed to a worker process, in order to reduce damage from a
# bug in the worker process. It is available on Linux systems at a performance cost. # bug in the worker process. It is available on Linux systems at a performance cost.
# The performance cost is roughly 2% overhead at transfer time (tested on a Linux 3.17.8). # The performance cost is roughly 2% overhead at transfer time (tested on a Linux 3.17.8).
# Note however, that process isolation is restricted to the specific libc versions
# the isolation was tested at. If you get random failures on worker processes, try
# disabling that option and report the failures you, along with system and debugging
# information at: https://gitlab.com/ocserv/ocserv/issues
isolate-workers = true isolate-workers = true
# A banner to be displayed on clients # A banner to be displayed on clients