port anon-ws-disable-stacked-tor to systemd socket activation (Duplicate Title)

[phabricator-migrator]

Information

ID: 623
PHID: PHID-TASK-izoauzgtrnc5seotwdyh
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

Rather than having loads of socat listeners idling around where lots of them don’t get used, it may be better to use systemd socket activation.

systemd-socket-proxyd might help.

Otherwise stackexchange claims socat also works with systemd socket activation.

Ideally, we could avoid having one systemd unit file per port redirection. Perhaps systemd template unit files can be used.

Comments

---

HulaHoop

2017-02-06 00:08:29 UTC

Good idea.

---

Patrick

2017-02-11 03:48:37 UTC

As per [systemd-devel] redirect multiple local ports to corresponding remote IPs / ports? the package would not be that cleanly implemented. Disadvantage: lots of systemd unit files. One per port. (Also one per unix domain socket file.)

---

Patrick

2017-02-20 22:57:18 UTC

systemd feature request:
make ListenStream= port number available as ${PORT} for ExecStart
make ListenStream= port number available as ${PORT} for ExecStart · Issue #5403 · systemd/systemd · GitHub

---

Patrick

2018-02-11 00:12:17 UTC

Had to be done for Whonix 14 to stop wasting RAM by too many socat instances.

https://forums.whonix.org/t/port-anon-ws-disable-stacked-tor-to-systemd-socket-activation

---

Patrick

2018-05-16 15:33:22 UTC

@HulaHoop in T544#16070

How are we doing on RAM use? Is it any more or less efficient than socat after you cut down the number of spawned instances?

I haven’t compared

• a) systemd-socket-proxyd in combination with socat
• vs b) systemd-socket-proxyd in combination with systemd-socket-proxyd.

b) is is implemented since that was more straight forward, already documented and more “standard” solution.)

As long as the socket is not being used, no systemd-socket-proxyd is being spawned, since this is using systemd socket activation, which results in low RAM usage for most use cases.

I would expect systemd socket activation and systemd-socket-proxyd to be the most modern and RAM efficient.