@@ -11,12 +11,13 @@ Features
11
11
to prevent detection by DPI
12
12
* Secure-only mode (only allow connections with 'dd'-secrets). See ` allowed_protocols ` option.
13
13
* Multiple ports with unique secret and promo tag for each port
14
- * Automatic configuration reload (no need for restarts once per day)
15
- * Most of the configuration options can be updated without service restart
16
14
* Very high performance - can handle tens of thousands connections! Scales to all CPU cores.
15
+ 1Gbps, 90k connections on 4-core/8Gb RAM cloud server.
17
16
* Supports multiplexing (Many connections Client -> Proxy are wrapped to small amount of
18
17
connections Proxy -> Telegram Server)
19
18
* Protection from [ replay attacks] ( https://habr.com/ru/post/452144/ ) used to detect proxies in some countries
19
+ * Automatic telegram configuration reload (no need for restarts once per day)
20
+ * Most of the configuration options can be updated without service restart
20
21
* Small codebase compared to official one
21
22
* A lots of metrics could be exported (optional)
22
23
@@ -270,6 +271,17 @@ it will use less CPU and will be better protected from replay attacks, but will
270
271
max_age_minutes => 1440 }},
271
272
```
272
273
274
+ Also , for highload setups it 's recommended to increase sysctl parameters:
275
+
276
+ ```
277
+ sudo sysctl net.ipv4.tcp_max_orphans=128000
278
+ sudo sysctl ' net .ipv4 .tcp_mem = 179200 256000 384000 '
279
+ ```
280
+
281
+ Values for `tcp_mem` are in pages. Size of one page can be found by `getconf PAGESIZE` and is most
282
+ likely 4kb.
283
+
284
+
273
285
Helpers
274
286
-------
275
287
0 commit comments