thanks again for responding! ..... > > Is it overkill to go 10-20 multiple instances vs. single > > instance with: > > > > - one submission per IP > > - one smtp bound to each IP > > You've not yet made a good case for dedicating an instance > per domain, instead of running all the domains on a single > IP with a single certificate, ...
Its a business decision that the domains must hav their own certs the match the domain name. I cant change that requirement. Outgoing personality is optional because users dont see that traffic. > > Isnt the second part there half of the problem you described? > > I mean, if I add a smtp line in master.cf for each IP isnt > > that going to generate same number of smtp processes as with > > multiple instances? You would save on shared smtpd though > > I think. Maybe a middle ground. > > I am suggesting you do none of this, but if you must for some > reason, then multiple instances are fine up to a limit. Then > add more network bandwidth and hardware. Can anyone provide reference to another thread on the list or any studies where people give some rough numbers? I'd like to figure out for our hardware where our limit might be, even in a very very general sense. I dont know if I'm going into danger zone with 3 instances, 10 instances or not until 50.....? Who has written about this? > > OTOH the only real important point is client-facing SSL to > > match each domain name for submission so the most prudent > > answer is probably single instance with multiple submission ONLY. > > Submission is different, here MUAs may well use SNI, but Postfix > does not support that on the server side at this time. Multiple > submission services in master.cf work fine, and are probably > simpler to manage than full-blown multiple instances. I comfortible managing instances I like the work you've done and its great! But i take your point, it still might be more trouble than its worth. So I lean to this for our solution yet I am still interested to learn at what point does spooling up more instances become overkill too much potential contention for a given set of hardware.
