We have a TLS server using tokio + openssl + tokio-openssl. Sometimes, the process hangs forever and accept queues become full (confirmed using ss -tulpn).
The result of strace -fp <pid>:
futex(0x7fda58001c30, FUTEX_WAIT_BITSET_PRIVATE, 5, NULL, FUTEX_BITSET_MATCH_ANY ... unfinished
futex(0x7fda58001c30, FUTEX_WAIT_BITSET_PRIVATE, 2, NULL, FUTEX_BITSET_MATCH_ANY ... unfinished
futex(0x7fda58001c30, FUTEX_WAIT_BITSET_PRIVATE, 5, NULL, FUTEX_BITSET_MATCH_ANY ... unfinished
...
uname -r
5.15.0-56-generic
cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.1 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy
tokio = {version = "1.26", features = ["rt-multi-thread", "macros", "fs", "sync", "net", "io-util", "time"]}
tokio-openssl = "0.6"
openssl = "0.10"
Openssl 3.1.0 is built and linked statically:
./Configure --prefix=${OPENSSL_DIR} --openssldir=${OPENSSL_DIR} enable-weak-ssl-ciphers no-dtls enable-ssl2 enable-ssl3 enable-tls1 enable-tls1_1 enable-tls1_2 enable-tls1_3 no-shared -DOPENSSL_TLS_SECURITY_LEVEL=0
make -j`nproc`
make install_sw
The process is run as a docker container with --net host.
docker version
Client: Docker Engine - Community
Version: 20.10.21
API version: 1.41
Go version: go1.18.7
Git commit: baeda1f
Built: Tue Oct 25 18:01:58 2022
OS/Arch: linux/amd64
Context: default
Experimental: true
Server: Docker Engine - Community
Engine:
Version: 20.10.21
API version: 1.41 (minimum version 1.12)
Go version: go1.18.7
Git commit: 3056208
Built: Tue Oct 25 17:59:49 2022
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.6.9
GitCommit: 1c90a442489720eec95342e1789ee8a5e1b9536f
runc:
Version: 1.1.4
GitCommit: v1.1.4-0-g5fd4c4d
docker-init:
Version: 0.19.0
GitCommit: de40ad0