Learn about Centmin Mod LEMP Stack today
Become a Member

Beta Branch update nginx ssl_include.conf in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Aug 8, 2019.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    11:32 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update nginx ssl_include.conf in 123.09beta01

    - add NGINX_SSLCACHE_ALLOWOVERRIDE='y' option which when set in persistent config file /etc/centminmod/custom_config.inc, allows users to optionally and dynamically tune nginx ssl_session_cache in /usr/local/nginx/conf/ssl_include.conf based on system detected memory installed at initial centmin mod install time and for existing centmin mod installs. Default is set to NGINX_SSLCACHE_ALLOWOVERRIDE='n' so there is no override.
    - only will dynamically tune on non-openvz VPS systems i.e. xen, kvm, vmware and dedicated servers due to raising virtual memory VSZ and how openvz vps systems regard virtual memory as used memory. VSZ vs RSS memory https://community.centminmod.com/posts/75863/
    - create new nginx shared ssl cache name SSLv2 in /usr/local/nginx/conf/ssl_include.conf so not to conflict with any existing shared ssl cache from existing ssl cache name = SSL
    - if you don't like how much extra virtual memory VSZ nginx is using due to this update, you can reset NGINX_SSLCACHE_ALLOWOVERRIDE='n' option or remove it from persistent config file /etc/centminmod/custom_config.inc and manually edit /usr/local/nginx/conf/ssl_include.conf ssl_session_cache allocated memory i.e. previous default for nginx was 10m = 10 megabytes

    Continue reading...


    123.09beta01 branch