Re: SSL for screenshots.debian.net?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
FYI… I have made a little progress. HTTPS with redirection for all
requests is now enabled. But I have tuned up the Apache parameters a
bit. Now the status looks better:
CPU Usage: u430.37 s31.58 cu0 cs0 - 43.3% CPU load
84.2 requests/sec - 1.2 MB/second - 14.3 kB/request
180 requests currently being processed, 170 idle workers
__K_CW__K__K_K__K___K______K__KK_____KK__KKK_K_R__..............
_KKK_C__K_KRKK_K_K_C_R____RK_KCK___KC_K_K_K_____KK..............
KC__KC_KR____CK_KK__K__K_KKC__KKW_K_KK_R_CC_KK__K_..............
................................................................
_K_KK__RKKCK_KK__KCK_K___K_WC_K_KCR_K__K___KCK__KK..............
................................................................
KK_K_KKK_______K___K_R_KRKK___KKK_______KC_C_K_K_R..............
___K__K_KW___KKKKKCKKK_KKK_WKK__C_R_WR_K__C__KRK__..............
................................................................
_KRC_K___K_KRCKKKKK__KK_CRKK_KKCC__R_W_KK_KK_K__CK..............
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process
I was fooled earlier by thinking that "." (open slot) means an
available socket/listener/thread/whatever. My current configuration is
now:
<IfModule mpm_worker_module>
StartServers 2
MinSpareThreads 75
MaxSpareThreads 250
ThreadLimit 64
ThreadsPerChild 50
MaxClients 500
MaxRequestsPerChild 0
</IfModule>
As I said I have never used Apache in a high-performance environment
(if you consider 80 req/sec) high. I assume that I should have a
considerable amount of connections in "_" (waiting for connection)
state. Now the system load is still much higher but that's probably
because packages.debian.org and packages.ubuntu.com request
screenshots as HTTP first and then get redirected which doubles the
amount of requests. I should probably exclude /thumbnail and
/thumbnail-with-version from the redirection to avoid duplicate requests.
Anyway… feel free to make packages.debian.org use HTTPS now.
…Christoph
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlL75e0ACgkQCV53xXnMZYbqrQCdGD3kBqnrAVM1leAuZbNbqtWL
L80An2IgO890m1LTRZItQEvrIm4UN3cu
=i+0/
-----END PGP SIGNATURE-----
Reply to: