ocserv memory increase on occtl reload

Niels Peen niels at peen.ch
Mon Aug 17 12:27:39 PDT 2015


Hi Nikos,

I run two configurations on each server, one using radius authentication and one using client-certificate authentication. The configuration is identical otherwise.

When I reload through occtl the certificate version significantly increases in size (both VIRT and RES) while the radius version maintains a stable size no matter how many times I reload.

root at X:~# ps auxw|grep ocserv
root      5717  0.0 25.9 334520 198064 ?       Ss   Aug14   0:02 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-cert-X.conf
root      5718  0.0  0.5  85948  4156 ?        S    Aug14   0:00 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-cert-X.conf
root at X:~# occtl -s /var/run/occtl-cert-X.socket reload
Server scheduled to reload
root at X:~# ps auxw|grep ocserv
root      5717  0.0 29.6 362028 225756 ?       Ss   Aug14   0:02 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-cert-X.conf
root      5718  0.0  0.5  85948  4400 ?        S    Aug14   0:00 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-cert-X.conf
root at X:~# 

The radius version for comparison:

root     15422  0.0  0.5  89528  4452 ?        Ss   Aug14   0:02 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-X.conf
root     15447  0.0  0.5  88228  4532 ?        S    Aug14   0:01 /usr/local/sbin/ocserv --foreground -c /etc/ocserv/ocserv-X.conf

I didn’t notice this before as I had a habit to restart ocserv rather than reload it. It was happening with 10.5 when I noticed it a few days ago. Updating to 10.7 did not fix it.

Best regards,
Niels


More information about the openconnect-devel mailing list