{"id":207490,"date":"2025-07-08T12:19:52","date_gmt":"2025-07-08T04:19:52","guid":{"rendered":"https:\/\/server.hk\/cnblog\/207490\/"},"modified":"2025-07-08T12:19:52","modified_gmt":"2025-07-08T04:19:52","slug":"golang-crypto-tls-%e5%86%85%e5%ad%98%e6%b3%84%e6%bc%8f","status":"publish","type":"post","link":"https:\/\/server.hk\/cnblog\/207490\/","title":{"rendered":"Golang crypto\/tls \u5185\u5b58\u6cc4\u6f0f"},"content":{"rendered":"

<\/b> <\/p>\n

\u5f53\u524d\u4f4d\u7f6e\uff1a ><\/span> ><\/span> ><\/span> ><\/span> Golang crypto\/tls \u5185\u5b58\u6cc4\u6f0f<\/span><\/p>\n

\u6765\u6e90\uff1astackoverflow<\/span>
\n2024-04-22 23:45:43<\/span>
\n<\/i>0\u6d4f\u89c8<\/span>
\n<\/i>\u6536\u85cf<\/span> <\/p>\n

\u4eca\u5929\u7ed9\u5927\u5bb6\u5e26\u6765\u4e86\u300aGolang crypto\/tls \u5185\u5b58\u6cc4\u6f0f\u300b<\/span>\uff0c\u5176\u4e2d\u6d89\u53ca\u5230\u7684\u77e5\u8bc6\u70b9\u5305\u62ec<\/span>\u7b49\u7b49\uff0c\u65e0\u8bba\u4f60\u662f\u5c0f\u767d\u8fd8\u662f\u8001\u624b\uff0c\u90fd\u9002\u5408\u770b\u4e00\u770b\u54e6~\u6709\u597d\u7684\u5efa\u8bae\u4e5f\u6b22\u8fce\u5927\u5bb6\u5728\u8bc4\u8bba\u7559\u8a00\uff0c\u82e5\u662f\u770b\u5b8c\u6709\u6240\u6536\u83b7\uff0c\u4e5f\u5e0c\u671b\u5927\u5bb6\u80fd\u591a\u591a\u70b9\u8d5e\u652f\u6301\u5440\uff01\u4e00\u8d77\u52a0\u6cb9\u5b66\u4e60~<\/p>\n

\u95ee\u9898\u5185\u5bb9
\n <\/p>\n

\u95ee\u9898\uff1a<\/strong>\u4e3a\u4ec0\u4e48\u5373\u4f7f\u53d8\u91cf\u8d85\u51fa\u8303\u56f4\uff0c*tls.conn \u4e5f\u4e0d\u4f1a\u88ab\u5783\u573e\u56de\u6536\uff0c\u5e76\u4e14\u4f7f\u7528 (*tls.conn).close()<\/code> \u65b9\u6cd5\u6b63\u786e\u5173\u95ed\u5b83\uff1f\u4e0b\u9762\u7ed9\u51fa\u4e86\u53ef\u91cd\u73b0\u7684\u5b8c\u6574\u4ee3\u7801\u3002<\/p>\n

\u52a8\u673a\uff1a<\/strong>\u5230\u76ee\u524d\u4e3a\u6b62\uff0c\u6211\u5df2\u7ecf\u5c1d\u8bd5\u4e86 2 \u4e2a websocket \u5e93\uff08https:\/\/github.com\/gorilla\/websocket \u548c https:\/\/github.com\/gobwas\/ws\uff09 – \u8fd0\u884c\u670d\u52a1\uff08> 24 \u5c0f\u65f6\uff09\uff0c\u5728\u5176\u6574\u4e2a\u751f\u547d\u5468\u671f\u4e2d\u4f5c\u4e3a\u5ba2\u6237\u7aef\u7ef4\u62a4\u7ea6 10 \u4e2a websocket \u8fde\u63a5\u3002\u6709\u65f6\u5b83\u4eec\u4e0e\u670d\u52a1\u5668\u65ad\u5f00\u8fde\u63a5\uff0c\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\u6211\u4f1a\u5efa\u7acb\u4e00\u4e2a\u65b0\u8fde\u63a5\u3002\u5185\u5b58\u4f7f\u7528\u91cf\u5728\u5176\u6574\u4e2a\u751f\u547d\u5468\u671f\u4e2d\u7a33\u6b65\u589e\u957f\uff0c\u5e76\u4e14\u4ece\u5185\u5b58\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0c\u5b83\u6307\u5411\u7559\u5728\u5806\u4e0a\u7684\u5e95\u5c42 *tls.conn \u5bf9\u8c61\u3002 \uff08\u4e0d\u88ab\u5783\u573e\u6536\u96c6\uff09\u3002<\/p>\n

\u8981\u91cd\u73b0\u7684\u5b8c\u6574\u4ee3\u7801<\/strong><\/p>\n

package main\n\nimport (\n    \"crypto\/tls\"\n    \"fmt\"\n    \"log\"\n    _ \"net\/http\/pprof\"\n    \"os\"\n    \"os\/signal\"\n    \"runtime\"\n    \"syscall\"\n    \"time\"\n)\n\nfunc finalizer(_ interface{}) {\n    fmt.println(\"finalizer called\")\n}\n\nfunc main() {\n    \/\/ setup interrupt handler\n    c := make(chan os.signal)\n    signal.notify(c, os.interrupt, syscall.sigterm)\n\n    for i := 0; i < 100; i++ {\n        go func() {\n            for {\n                tlsconnectthencloseafterwait()\n            }\n        }()\n    }\n\n    <-c\n    os.exit(1)\n\n}\n\nfunc tlsconnectthencloseafterwait() {\n    conn, err := tls.dial(\"tcp\", \"mail.google.com:443\", &tls.config{})\n    if err != nil {\n        log.fatalln(\"failed to connect: \" + err.error())\n    }\n    defer func() {\n        err := conn.close()\n        if err != nil {\n            log.fatalln(\"closing conn failed\")\n        }\n    }()\n\n    runtime.setfinalizer(conn, finalizer)\n    conn.write([]byte(\"hello how are you\"))\n\n    timer := time.newtimer(time.second)\n    <-timer.c\n}<\/pre>\n
godebug=gctrace=1 .\/main<\/code> \u7684\u8f93\u51fa<\/p>\n
gc 1 @0.088s 1%: 0+9.0+0 ms clock, 0+12\/11\/0+0 ms cpu, 4->5->1 MB, 5 MB goal, 12 P\ngc 2 @0.102s 3%: 0+4.9+0.99 ms clock, 0+5.9\/6.0\/0+11 ms cpu, 4->4->1 MB, 5 MB goal, 12 P\ngc 3 @0.114s 5%: 0+4.9+1.0 ms clock, 0+3.9\/10\/2.9+12 ms cpu, 4->4->2 MB, 5 MB goal, 12 P\ngc 4 @0.171s 4%: 0+5.0+0 ms clock, 0+1.0\/9.9\/0+0 ms cpu, 4->5->3 MB, 5 MB goal, 12 P\ngc 5 @0.196s 4%: 0+5.9+0 ms clock, 0+2.9\/9.9\/0+0 ms cpu, 5->7->3 MB, 6 MB goal, 12 P\ngc 6 @0.352s 2%: 1.0+2.0+0 ms clock, 12+0\/1.9\/1.9+0 ms cpu, 6->7->4 MB, 7 MB goal, 12 P\ngc 7 @0.365s 2%: 0.99+3.0+0 ms clock, 11+3.0\/5.0\/0+0 ms cpu, 7->8->5 MB, 8 MB goal, 12 P\ngc 8 @0.399s 3%: 0+13+0 ms clock, 0+18\/29\/1.0+0 ms cpu, 9->11->6 MB, 10 MB goal, 12 P\ngc 9 @1.278s 1%: 1.0+28+0 ms clock, 12+9.9\/53\/0+0 ms cpu, 10->13->9 MB, 13 MB goal, 12 P\ngc 10 @1.433s 2%: 1.0+22+0 ms clock, 12+45\/55\/1.0+0 ms cpu, 14->16->9 MB, 18 MB goal, 12 P\ngc 11 @1.534s 2%: 0+6.0+0 ms clock, 0+4.0\/15\/3.0+0 ms cpu, 16->17->11 MB, 19 MB goal, 12 P\ngc 12 @2.479s 1%: 0+3.0+0 ms clock, 0+0\/6.0\/18+0 ms cpu, 20->20->12 MB, 22 MB goal, 12 P\ngc 13 @2.656s 1%: 1.0+10+0 ms clock, 12+3.0\/30\/4.9+0 ms cpu, 23->25->16 MB, 25 MB goal, 12 P\ngc 14 @3.737s 1%: 0+6.0+0 ms clock, 0+3.0\/18\/9.0+0 ms cpu, 31->33->20 MB, 33 MB goal, 12 P\ngc 15 @4.830s 0%: 0+5.9+0 ms clock, 0+5.0\/13\/16+0 ms cpu, 39->40->25 MB, 41 MB goal, 12 P\ngc 16 @6.733s 0%: 0.99+16+0.99 ms clock, 11+7.9\/47\/80+11 ms cpu, 50->50->32 MB, 51 MB goal, 12 P\ngc 17 @8.140s 0%: 0.99+21+0 ms clock, 11+3.0\/59\/125+0 ms cpu, 64->64->42 MB, 65 MB goal, 12 P\ngc 18 @11.168s 0%: 1.0+28+0 ms clock, 12+24\/78\/97+0 ms cpu, 82->82->54 MB, 84 MB goal, 12 P\ngc 19 @14.433s 0%: 0.99+27+0 ms clock, 11+9.0\/74\/146+0 ms cpu, 106->106->70 MB, 108 MB goal, 12 P\ngc 20 @18.883s 0%: 0+47+0 ms clock, 0+6.0\/133\/211+0 ms cpu, 137->138->91 MB, 140 MB goal, 12 P\ngc 21 @24.437s 0%: 0.99+30+0.99 ms clock, 11+15\/91\/101+11 ms cpu, 177->178->118 MB, 182 MB goal, 12 P\ngc 22 @31.872s 0%: 1.0+105+0 ms clock, 12+60\/317\/256+0 ms cpu, 230->233->155 MB, 236 MB goal, 12 P\ngc 23 @41.705s 0%: 0+101+0 ms clock, 0+15\/283\/549+0 ms cpu, 302->303->200 MB, 310 MB goal, 12 P\ngc 24 @54.302s 0%: 0+92+0 ms clock, 0+9.0\/278\/472+0 ms cpu, 390->392->260 MB, 400 MB goal, 12 P\ngc 25 @70.777s 0%: 0+38+0 ms clock, 0+4.9\/113\/321+0 ms cpu, 508->508->337 MB, 521 MB goal, 12 P\ngc 26 @92.203s 0%: 0+108+0 ms clock, 0+57\/326\/391+0 ms cpu, 658->662->442 MB, 675 MB goal, 12 P\ngc 27 @120.781s 0%: 2.0+99+0 ms clock, 24+11\/292\/529+0 ms cpu, 862->864->574 MB, 884 MB goal, 12 P<\/pre>\n
\u7ec8\u7ed3\u5668\u6c38\u8fdc\u4e0d\u4f1a\u88ab\u8c03\u7528\uff0c\u5e76\u4e14\u5185\u5b58\u4e0d\u65ad\u589e\u957f\u3002<\/p>\n
\u4f7f\u7528go\u7248\u672cgo1.15.8 windows\/amd64<\/code><\/p>\n
\u8fd8\u94fe\u63a5\u5230\u6b64\u5904\u7684 github \u95ee\u9898\uff1ahttps:\/\/github.com\/golang\/go\/issues\/41987<\/p>\n
 <\/p>\n
\u6b63\u786e\u7b54\u6848<\/h2>\n
 <\/p>\n
\u60a8\u4f3c\u4e4e\u8bef\u7528\u4e86 runtime.setfinalizer<\/code>\uff1b \u7684\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n
[\u7b2c\u4e00\u4e2a\u53c2\u6570]\u5fc5\u987b\u662f\u4e00\u4e2a\u6307\u9488<\/strong>\uff0c\u6307\u5411\u901a\u8fc7\u8c03\u7528 new<\/code>\u3001\u83b7\u53d6\u590d\u5408\u6587\u5b57\u7684\u5730\u5740\u6216\u83b7\u53d6\u5c40\u90e8\u53d8\u91cf\u7684\u5730\u5740\u5206\u914d\u7684\u5bf9\u8c61\u3002<\/p>\n
\uff08\u6211\u7684\u91cd\u70b9\uff09<\/p>\n
\u5982\u679c\u6211\u5c06 &conn<\/code> \uff08\u800c\u4e0d\u662f conn<\/code> \u672c\u8eab\uff09\u4f20\u9012\u7ed9 runtime.setfinalizer<\/code>\uff0c\u5219\u7ec8\u7ed3\u5668\u4f1a\u88ab\u8c03\u7528\uff0c\u5e76\u4e14\u5806\u6c38\u8fdc\u4e0d\u4f1a\u8d85\u8fc7 8 mb\uff1a<\/p>\n
$ GODEBUG=gctrace=1 .\/main\ngc 1 @1.789s 0%: 0.041+0.67+0.018 ms clock, 0.33+0.31\/1.0\/2.3+0.14 ms cpu, 4->4->1 MB, 5 MB goal, 8 P\ngc 2 @1.874s 0%: 0.044+0.69+0.015 ms clock, 0.35+0.20\/1.0\/2.4+0.12 ms cpu, 4->4->2 MB, 5 MB goal, 8 P\ngc 3 @1.880s 0%: 0.064+0.79+0.014 ms clock, 0.51+0.22\/1.1\/2.3+0.11 ms cpu, 4->4->2 MB, 5 MB goal, 8 P\ngc 4 @1.887s 0%: 0.14+1.5+0.080 ms clock, 1.1+1.6\/2.5\/0+0.64 ms cpu, 5->5->3 MB, 6 MB goal, 8 P\ngc 5 @1.904s 0%: 0.097+1.1+0.025 ms clock, 0.77+1.0\/1.9\/2.6+0.20 ms cpu, 6->6->3 MB, 7 MB goal, 8 P\ngc 6 @1.974s 0%: 0.12+1.7+0.12 ms clock, 0.99+1.4\/2.9\/1.2+0.98 ms cpu, 6->7->3 MB, 7 MB goal, 8 P\ngc 7 @2.900s 0%: 0.22+1.9+0.025 ms clock, 1.8+5.7\/2.9\/0+0.20 ms cpu, 7->7->4 MB, 8finalizer called\n MB goal, 8finalizer called\n P\nfinalizer called\nfinalizer called\nfinalizer called\nfinalizer called\nfinalizer called\nfinalizer called\n--snip--<\/pre>\n
\u4f7f\u7528 -gcflags=\"-m\"<\/code> \u7f16\u8bd1\u7a0b\u5e8f\u663e\u793a\u5c40\u90e8\u53d8\u91cf conn<\/code> \u5df2\u79fb\u81f3\u5806\u4e2d\u3002\u6211\u4e0d\u662f\u7ec8\u7ed3\u5668\u4e13\u5bb6\uff08\u5230\u76ee\u524d\u4e3a\u6b62\uff09\uff0c\u4f46\u6211\u6000\u7591\u60a8\u6ee5\u7528 runtime.setfinalizer<\/code> \u4f1a\u5bfc\u81f4\u4fdd\u7559\u5bf9 conn<\/code> \u53d8\u91cf\u7684\u5f15\u7528\uff0c\u4ece\u800c\u4f7f\u5176\u6bcf\u4e2a\u5b9e\u4f8b\u4e0d\u7b26\u5408\u5783\u573e\u56de\u6536\u7684\u6761\u4ef6\uff0c\u4ece\u800c\u5bfc\u81f4\u5185\u5b58\u6cc4\u6f0f\u3002 p> <\/p>\n
\u6211\u4e0d\u6e05\u695a\u4f60\u4e3a\u4ec0\u4e48\u8981\u4f7f\u7528\u7ec8\u7ed3\u5668\uff1b\u4f20\u7edf\u89c2\u70b9\u662f\u3002<\/p>\n
\u7406\u8bba\u8981\u638c\u63e1\uff0c\u5b9e\u64cd\u4e0d\u80fd\u843d\uff01\u4ee5\u4e0a\u5173\u4e8e\u300aGolang crypto\/tls \u5185\u5b58\u6cc4\u6f0f\u300b\u7684\u8be6\u7ec6\u4ecb\u7ecd\uff0c\u5927\u5bb6\u90fd\u638c\u63e1\u4e86\u5427\uff01\u5982\u679c\u60f3\u8981\u7ee7\u7eed\u63d0\u5347\u81ea\u5df1\u7684\u80fd\u529b\uff0c\u90a3\u4e48\u5c31\u6765\u5173\u6ce8\u516c\u4f17\u53f7\u5427\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5f53\u524d\u4f4d\u7f6e\uff1a > > ...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4925],"tags":[],"class_list":["post-207490","post","type-post","status-publish","format-standard","hentry","category-4925"],"_links":{"self":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/comments?post=207490"}],"version-history":[{"count":0,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207490\/revisions"}],"wp:attachment":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/media?parent=207490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/categories?post=207490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/tags?post=207490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}