[openssl-users] Increased memory consumption noticed when upgrading from openssl 1.0.1 to openssl 1.0.2

[Andrew Payne]

Hi,

Thanks for the reply.

We are using the openssl library with nginx to serve traffic in a
multi-tenanted reverse proxy environment. We made no changes to our nginx
config/build outside of upgrading to openssl 1.0.2.

Currently, all servers are running openssl 1.0.1p except for a couple of
servers which are running openssl 1.0.2g.

During normal operation the servers on average use about 10 gigs of memory,
but when running 1.0.2 an extra 25 gigs of memory is being consumed.

When we do an nginx reload, we see massive 50-60 gig dips in available
memory when running openssl 1.0.2.

On Mon, Mar 21, 2016 at 3:04 AM, Matt Caswell <matt at openssl.org> wrote:

>
>
> On 20/03/16 03:15, Andrew Payne wrote:
> > Hello,
> >
> > My company is in the process of upgrading from openssl 1.0.1 to openssl
> > 1.0.2. We noticed that when we use any version of openssl 1.0.2 we have
> > an extremely high increase in memory usage. Around 15 or more gigs of
> > memory  extra are consumed.
> >
> > My questions are as follows:
> >
> > Are there any settings we should be adjusting to decrease openssl 1.0.2
> > memory consumption?
> >
> > Has anything changed between openssl 1.0.1 and openssl 1.0.2 that would
> > account for this increase?
>
> Not that I can think of, and I don't recall this issue coming up before
> which would suggest its not a widespread problem. Any clues as to what
> the application is doing at the time you see this?
>
> Matt
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160321/94b52848/attachment.html>