Re: 100 MB RAM per clinet in an imap-proxy setup ...
- On Sep 3, 2021, at 10:06 AM, Aki Tuomi aki.tu...@open-xchange.com wrote:
>> On 03/09/2021 10:25 Tobias Oetiker wrote:
>>
>>
>> - On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tu...@open-xchange.com wrote:
>>
>> >> On 03/09/2021 09:35 Tobias Oetiker wrote:
>> >>
>> >>
>> >> Hi All,
>> >>
>> >> I spent some quality time yesterday, tuning dovecot on a server which
>> >> serves as
>> >> an imap-proxy in front of a zimbra setup
>> >> the imap proxy does ldap client-cert authentication and works well.
>> >>
>> >> BUT
>> >>
>> >> I found that the imap-login processes seem to gain 100 MB per connection
>> >> they
>> >> are accepting ... this seems pretty hefty.
>> [...]
>> >
>> > I would strongly recommend using "high performance" configuration on your
>> > proxy.
>> >
>> > See
>> > https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
>>
>> yes that is what we have:
>>
>> service imap-login {
>> service_count = 0
>> client_limit = 380
>> process_limit = 10
>> vsz_limit = 39G
>> }
>>
>> the machine has 180 GB ram
>>
>
> Which version of dovecot are you running?
>
2.3.9
I am planning to do a testsetup and maybe add mtrace to the code to see who is
using this memory ... :)
cheers
tobi
--
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
www.oetiker.ch t...@oetiker.ch +41 62 775 9902
Re: 100 MB RAM per clinet in an imap-proxy setup ...
> On 03/09/2021 10:25 Tobias Oetiker wrote:
>
>
> - On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tu...@open-xchange.com wrote:
>
> >> On 03/09/2021 09:35 Tobias Oetiker wrote:
> >>
> >>
> >> Hi All,
> >>
> >> I spent some quality time yesterday, tuning dovecot on a server which
> >> serves as
> >> an imap-proxy in front of a zimbra setup
> >> the imap proxy does ldap client-cert authentication and works well.
> >>
> >> BUT
> >>
> >> I found that the imap-login processes seem to gain 100 MB per connection
> >> they
> >> are accepting ... this seems pretty hefty.
> [...]
> >
> > I would strongly recommend using "high performance" configuration on your
> > proxy.
> >
> > See
> > https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
>
> yes that is what we have:
>
> service imap-login {
> service_count = 0
> client_limit = 380
> process_limit = 10
> vsz_limit = 39G
> }
>
> the machine has 180 GB ram
>
> cheers
> tobi
>
> --
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
> www.oetiker.ch t...@oetiker.ch +41 62 775 9902
Which version of dovecot are you running?
Aki
Re: 100 MB RAM per clinet in an imap-proxy setup ...
- On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tu...@open-xchange.com wrote:
>> On 03/09/2021 09:35 Tobias Oetiker wrote:
>>
>>
>> Hi All,
>>
>> I spent some quality time yesterday, tuning dovecot on a server which serves
>> as
>> an imap-proxy in front of a zimbra setup
>> the imap proxy does ldap client-cert authentication and works well.
>>
>> BUT
>>
>> I found that the imap-login processes seem to gain 100 MB per connection they
>> are accepting ... this seems pretty hefty.
[...]
>
> I would strongly recommend using "high performance" configuration on your
> proxy.
>
> See
> https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
yes that is what we have:
service imap-login {
service_count = 0
client_limit = 380
process_limit = 10
vsz_limit = 39G
}
the machine has 180 GB ram
cheers
tobi
--
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
www.oetiker.ch t...@oetiker.ch +41 62 775 9902
Re: 100 MB RAM per clinet in an imap-proxy setup ...
> On 03/09/2021 09:35 Tobias Oetiker wrote: > > > Hi All, > > I spent some quality time yesterday, tuning dovecot on a server which serves > as an imap-proxy in front of a zimbra setup > the imap proxy does ldap client-cert authentication and works well. > > BUT > > I found that the imap-login processes seem to gain 100 MB per connection they > are accepting ... this seems pretty hefty. > > It does not seem to be a leak, since the setup is stable when client_limit > and process_limit are set appropriately. > > Any ideas what part of the code I should be looking at ? Or is this a > configuration problem ? > > cheers > tobi > > -- > Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland > www.oetiker.ch t...@oetiker.ch +41 62 775 9902 I would strongly recommend using "high performance" configuration on your proxy. See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode Aki
100 MB RAM per clinet in an imap-proxy setup ...
Hi All, I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well. BUT I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty. It does not seem to be a leak, since the setup is stable when client_limit and process_limit are set appropriately. Any ideas what part of the code I should be looking at ? Or is this a configuration problem ? cheers tobi -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch t...@oetiker.ch +41 62 775 9902
