From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from korolev.univ-paris7.fr (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]) by mail.toke.dk (Postfix) with ESMTPS id 1ED3CAD382F for ; Wed, 15 Jan 2025 14:51:31 +0100 (CET) Authentication-Results: mail.toke.dk; dkim=pass (2048-bit key; unprotected) header.d=irif.fr header.i=@irif.fr header.a=rsa-sha256 header.s=dkim-irif header.b=P1SeH+Ks Received: from mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [81.194.30.253]) by korolev.univ-paris7.fr (8.14.4/8.14.4/relay1/82085) with ESMTP id 50FDpUZT029637; Wed, 15 Jan 2025 14:51:30 +0100 Received: from mailhub.math.univ-paris-diderot.fr (localhost [127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTP id 4FB0C7BE00; Wed, 15 Jan 2025 14:51:30 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=irif.fr; h= content-type:content-type:mime-version:user-agent:references :in-reply-to:subject:subject:from:from:message-id:date:date :received:received; s=dkim-irif; t=1736949088; x=1737813089; bh= OIyytwOBMVdqwzjNx1wKNw72vvUDnJGuYdQ3slU4eDA=; b=P1SeH+Ks9hqS6Ofv fBta6moIHr/JNKKNbcFjX8vpxO64EJyGeSw4C+B0ks+7fTVGwXs5TJ5wmVY8/Rt1 jKqGHa8hdlztLftY138TGzNNvVJkVk91v834889YawY7YSYBGOvCUEGDZxmVjDgZ 9Ch0EJfCxnLQGtMTzVjrh7+xXhKPwLhuOamggFLHNerNP62B9zd/ZdBcJKKq/NpC 3lonDp0shej18VhsVhJY/zw2A3/ubH0DV7i6HZLkmz9emoqw2EiSed22l0UHr2zn 8G/o0AeY4IFyvbXfvxwoAcRXNY01mV8VD7jkC4lLjjCHwB8jrBtFAJu+skKo8k7I Em2TtQ== X-Virus-Scanned: amavisd-new at math.univ-paris-diderot.fr Received: from mailhub.math.univ-paris-diderot.fr ([127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id jK8BpNxKxEDw; Wed, 15 Jan 2025 14:51:28 +0100 (CET) Received: from pirx.irif.fr (89-64-69-77.dynamic.chello.pl [89.64.69.77]) (Authenticated sender: jch) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTPSA id 9D4227BCC1; Wed, 15 Jan 2025 14:51:28 +0100 (CET) Date: Wed, 15 Jan 2025 14:51:27 +0100 Message-ID: <87plkouqw0.wl-jch@irif.fr> From: Juliusz Chroboczek To: Dirk-Willem van Gulik In-Reply-To: <0D36F069-3962-466B-A13D-C900BE406D1A@webweaving.org> References: <0D36F069-3962-466B-A13D-C900BE406D1A@webweaving.org> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/29.4 Mule/6.0 MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (korolev.univ-paris7.fr [194.254.61.138]); Wed, 15 Jan 2025 14:51:30 +0100 (CET) X-Miltered: at korolev with ID 6787BD62.000 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)! X-j-chkmail-Enveloppe: 6787BD62.000 from mailhub.math.univ-paris-diderot.fr/mailhub.math.univ-paris-diderot.fr/null/mailhub.math.univ-paris-diderot.fr/ X-j-chkmail-Score: MSGID : 6787BD62.000 on korolev.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000 X-j-chkmail-Status: Ham Message-ID-Hash: SVKCCVI4U4SLT35PS6SPGSYDM7ICW5QO X-Message-ID-Hash: SVKCCVI4U4SLT35PS6SPGSYDM7ICW5QO X-MailFrom: jch@irif.fr X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: galene@lists.galene.org X-Mailman-Version: 3.3.10 Precedence: list Subject: [Galene] Re: Greedy Galene :) -- file descriptors List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: > Galene needs a relatively large number of file descriptors (and will > complain in the log about the current, 13k, limit*. Yes, we use a distinct socket for every WebRTC peer connection, plus one for every WebSocket, and another bunch for NAT probing. I'm planning to reduce that at some point, but the functionality will remain optional unless I can show it doesn't harm performance. > Now I did notice that galene has a value check for 65k: > > https://github.com/jech/galene/blob/c465157eb5e31405daf3f33b8456e8c89aa51430/galene.go#L110 > > What is the reason for this ? What is a `normal' number for say up to > a 1000 users ?n File descriptors are cheap (they cost a few hundred bytes each, including the associated i-node). The 1024 limit is a historical artefact, due to limitations of the select system call on older BSD systems. I recommend that you just set the limit to 64k and never think about it again. At worst, it will allow an attacker to use up a few tens of kB of kernel memory. -- Juliusz