Netgate Store

Author Topic: SSL Certificate Deamon Children...How many?  (Read 264 times)

0 Members and 1 Guest are viewing this topic.

Offline beauw

  • Newbie
  • *
  • Posts: 9
  • Karma: +1/-0
    • View Profile
SSL Certificate Deamon Children...How many?
« on: February 06, 2018, 02:36:45 pm »
Anyone have experience with Squid proxy in a large environment? 

I have the SSL Certificate Daemon Children set at 25 but I still seem to get intermittent "Secure Connection Failed" responses.  I believe these are a result of unavailable certificate helpers at time of query.  A reload of the page usually fixes the issue within seconds.

Has anyone set the number of children higher with success?  Is it memory or CPU limited as you add more?

Offline Bismarck

  • Full Member
  • ***
  • Posts: 131
  • Karma: +24/-1
    • View Profile
Re: SSL Certificate Deamon Children...How many?
« Reply #1 on: February 07, 2018, 06:19:06 am »
Code: [Select]
sslcrtd_children 64 startup=10 idle=1
works fine here, not really higher load on cpu or ram.

http://www.squid-cache.org/Doc/config/sslcrtd_children/

Offline beauw

  • Newbie
  • *
  • Posts: 9
  • Karma: +1/-0
    • View Profile
Re: SSL Certificate Deamon Children...How many?
« Reply #2 on: February 07, 2018, 08:40:07 am »
Excellent - thanks for the tip.  Running smoothly now....hope it helps fix the errors.