Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
CONFIG proxy.config.ssl.max_record_size INT 0

Jira: TS-2365

Add forward secrecy support

Bryan Call: Please fill in this section

Jira: TS-2372

Release memory for idle SSL sessions

OpenSSL tends to allocate about 50KB of memory for each connection. Setting flag: "SSL_MODE_RELEASE_BUFFERS" can save around 34K per idle SSL connection. This flag has no effect on SSL v2 connections, or on DTLS connections. ref: http://www.openssl.org/docs/ssl/SSL_CTX_set_mode.html .

Jira: TS-2413

Configurable TLS session timeout threshold

Default is 300 seconds. It's good to be configurable so that application can specify the threshold for the expiration of internal session and session ticket. Therefore, this is now configurable with the following configuration option:

 

Code Block
CONFIG proxy.config.ssl.session_cache.timeout INT 0

Jira: TS-2416

Gentoo Layout changes

Runtimedir on Gentoo changed from /var/run to /run

...