From: David H. <hel...@us...> - 2013-12-29 20:55:20
|
Hi Folks, We end the year with our final release of 2013: SFCB 1.4.7. There are a few patches to fix some memory leaks with long running sfcc clients, and the usual handful of bug fixes, mostly for things that would occur only in unusual cases. There are a couple of new sfcb.cfg properties: sslDhParamsFilePath supports the use of an external Diffie Hellman (DH) parameters file, and sslEcDhCurveName allows the user to set the "curve name" for Elliptic Curve Diffie Hellman (ECDH) key generation. These options can be used with openssl cipher suites supporting "ephemeral" Diffie Hellman (DHE) key exchange algorithms. Ephemeral key exchange enhances security by decoupling the private key used to generate the session key, from the private key associated with the server certificate. This provides "forward secrecy" while maintaining a key exchange algorithm compatible with a conventional RSA-based server certificate. See the .cfg file comments for more info. Perhaps the most fun new feature is SFCB_LABELPROCS. This will label each SFCB process by adding some identifying information to the cmdline so that it appears in 'ps' output. This provides an easy way to identify each running SFCB process without having to rely on the "sfcb-ps.sh" or "sfcbproc" utilities. This really enhances visibility and is a great troubleshooting tool. Further, when using the ps command's -T or H options, you can see a labeled view with thread-level granularity, which is something you can't really do with "sfcb-ps.sh" or "sfcbproc". (Individual threads are not labeled per se; that is, each thread of a process has the same label. But you can easily see which threads belong to which process, and you can see the individual thread ids for each.) For example, before starting sfcb: $ export SFCB_LABELPROCS=100 Get a view of running sfcb processes: $ watch 'ps -efT H | grep sfcb[d]' Thanks to all who contributed to this release, especially Chris who fixed up the SFCC issues and Klaus Kampf who made a big contribution to LABELPROCS. You can see the NEWS file for full list of changes. The new release is tagged (SFCB_1_4_7) in git and the tarball is posted to the SourceForge download page. http://sourceforge.net/projects/sblim/files/sblim-sfcb/1.4%20branch%20%28current%29/ Next release I'll be focusing on some long standing shutdown and process hang issues. -Dave H. SBLIM Team |