tree 71740e232dab128d52ed5f2186fc8ebcfa3132ca
parent 93e7c006c1bc2e6a376af47a8587ea90580ac97a
author Willy Tarreau <w@1wt.eu> 1381168912 +0200
committer Willy Tarreau <w@1wt.eu> 1390920610 +0100
encoding latin1

MEDIUM: listener: apply a limit on the session rate submitted to SSL

Just like the previous commit, we sometimes want to limit the rate of
incoming SSL connections. While it can be done for a frontend, it was
not possible for a whole process, which makes sense when multiple
processes are running on a system to server multiple customers.

The new global "maxsslrate" setting is usable to fix a limit on the
session rate going to the SSL frontends. The limits applies before
the SSL handshake and not after, so that it saves the SSL stack from
expensive key computations that would finally be aborted before being
accounted for.

The same setting may be changed at run time on the CLI using
"set rate-limit ssl-session global".