Re: SSL renegotiation - Mailing list pgsql-hackers

From Robert Haas
Subject Re: SSL renegotiation
Date
Msg-id CA+TgmoZVGmyZLx7e4ARq_5nu4uDeN7wrvg1xJXg_o9c61CHu3g@mail.gmail.com
Whole thread Raw
In response to Re: SSL renegotiation  (Alvaro Herrera <alvherre@2ndquadrant.com>)
Responses Re: SSL renegotiation
List pgsql-hackers
On Mon, Sep 23, 2013 at 4:51 PM, Alvaro Herrera
<alvherre@2ndquadrant.com> wrote:
> Here's an updated version; this mainly simplifies code, per comments
> from Andres (things were a bit too baroque in places due to the way the
> code had evolved, and I hadn't gone over it to simplify it).
>
> The only behavior change is that the renegotiation is requested 1kB
> before the limit is hit: the raise to 1% of the configured limit was
> removed.

What basis do we have for thinking that 1kB is definitely enough to
avoid spurious disconnects?

(I have a bad feeling that you're going to say something along the
lines of "well, we tried it a bunch of times, and...".)

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company



pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: Assertions in PL/PgSQL
Next
From: Stephen Frost
Date:
Subject: Re: record identical operator