Hello,
after an unexpected behavior of WebSEAL in an overload situation I have some questions.
If I have a WebSEAL with three junctions (A, B and C)
Junction A should be limited to 300 connections
Junction B should be limited to 200 connections
Junction C should be limited to 100 connections
How should be the following parameters should be sized?
[server] worker-threads
[junction] worker-thread-hard-limit
In the past we was are running with:
worker-threads = 300
A: worker-thread-hard-limit = 100
B: worker-thread-hard-limit = 66
C: worker-thread-hard-limit = 33
Now we have changed to:
worker-threads = 600
A: worker-thread-hard-limit = 50
B: worker-thread-hard-limit = 33
C: worker-thread-hard-limit = 16
Gets WebSEAL in trouble or do we get a resource problem (ports for example), if we change the settings like the following and running lots of instances on one host:
worker-threads = 1000
A: worker-thread-hard-limit = 100
B: worker-thread-hard-limit = 100
C: worker-thread-hard-limit = 100
What happens, if the [server] worker-thread limit is reached?
I have seen lots of requests which are rejected on TCP layer (WebSEAL answers with a RST for SYN requests). Which parameter limits the incomming requests? There are no messages in the webseald.log. Only
DPWWM1493E Junction '/A' has reached it's worker thread hard limit.# The maximum number of idle client persistent connections. This value
# should be less than the
maximum number of connections supported by the
# WebSEAL server to ensure that the idle connections do not consume all of
# the available connections.
max-idle-persistent-connections = 512
Which parameter is referenced here?
I have also seen, there are hundrets of
HPDCO0192W LDAP server ldap:636 has failed. and
HPDCO0193W LDAP server ldap:636 has recovered. , but the LDAP server was always available. Are these connections limited by worker-threads too?
I can see these messages in a less count (2-5/hour) every day. Why is WebSEAL loosing this connection if there is no network reason?
------------------------------
Andreas Rühl
------------------------------