Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Grayhat
:: On Thu, 9 Jun 2016 12:37:26 -0400 :: :: K Post wrote: > Windows 2012 R2 > the certificate is a 2048 bit RSA cert > > SSL_Version is SSLv23:!SSLv3:!SSLv2 > Cipher list > is > kEECDH+ECDSA:kEECDH:kEDH:HIGH:+SHA:+RC4:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!DSS:!PSK:!SRP:!kECDH:!CAMELLIA128:!IDE

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
That makes sense, I was just playing with high and low values to see if there's any difference. I don't know what else to do. Really need TLS on, but major ISP's are giving up on us, especially Google who won't stay connected for more than 5 minutes or so. That's not enough time to transmit a lar

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Thomas Eckardt
Windows 2012 R2 has at least a system TCP receive and send buffer of 64KB. The max frame size for SSL is 16384 byte (16KB). If you set the SSL receive buffer for assp to 8192 , there will be 8192 byte left in the SSL-read-buffer after reading - assp warns about this and reads until the SSL-read

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
921600 isn't markedly different gives me something like 1.5 to 2 MB per minute. I am using just the shutdown list and watching the bytes and time to get the estimate. I can enable debugging to get a more precise number, but it's a moot point I think - without TLS, I just watched an 11mb attachment

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
and no, no other AV on the machine. On Thu, Jun 9, 2016 at 11:31 AM, Grayhat wrote: > :: On Thu, 9 Jun 2016 17:27:28 +0200 > :: <20160609172728.0...@gmx.net> > :: Grayhat wrote: > > > also, what OS are you running on ? > > I mean windows version, btw; also, is the box also running an AV (ot

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
Windows 2012 R2 the certificate is a 2048 bit RSA cert SSL_Version is SSLv23:!SSLv3:!SSLv2 Cipher list is kEECDH+ECDSA:kEECDH:kEDH:HIGH:+SHA:+RC4:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!DSS:!PSK:!SRP:!kECDH:!CAMELLIA128:!IDEA:!SEED On Thu, Jun 9, 2016 at 11:27 AM, Grayhat wrote: > :: On Wed, 1

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
Also, I tried setting all to 8192 and got lots of messages in the log like warning: there are 7268 byte pending in SSL buffer - this should not happen Turned tls off again for now. On Thu, Jun 9, 2016 at 10:52 AM, K Post wrote: > Updated to the newest version. > > When I did > sslrcv = 0, ssl

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Thomas Eckardt
Just made a test with my nice very old windows 2003 Sp1. It runs the default system TCP buffers at 8KB. The max wirespeed for this system is 16MBit/s inbound and 6MBit/s outbound. There is alot of other stuff using this line. Doing a mail with SSLin and SSLout to the ISP and back, I get the fo

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Grayhat
:: On Thu, 9 Jun 2016 17:27:28 +0200 :: <20160609172728.0...@gmx.net> :: Grayhat wrote: > also, what OS are you running on ? I mean windows version, btw; also, is the box also running an AV (other than the ClamD used by ASSP) and if yes, which one ?

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Grayhat
:: On Wed, 1 Jun 2016 22:55:00 -0400 :: :: K Post wrote: > Could this be the problem? Is OpenSSL even used by ASSP for receiving > email? I feel like it's not, but thought I'd put this out there. What do you have in SSL_version and SSL_cipher_list ? If empty, try the following config SSL_ve

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Thomas Eckardt
I'm sorry my fault - 99 is the hardcoded maximum at the moment. Use 921600 (900 KB) for all settings. >transferring at around 1.25MB per minute You've got the value from the connection screen? Looks very slow. with SessionLog set to diagnostic you'll see the message in the log: . info:

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread K Post
Updated to the newest version. When I did sslrcv = 0, sslsnd=0 I get, in green: *** Updated TCPBufferSize - TCP Receive Buffer is set to 65536 byte(note missing line break) *TCPBufferSize - TCP Send Buffer is set to 65536 byte* *TCPBufferSize - SSL Receive Buffer is set to 65536 byte* *TCPBuf

Re: [Assp-test] Very slow TLS sessions - Windows server

2016-06-09 Thread Thomas Eckardt
Install 2.5.2(16158) set 'TCPBufferSize' to : sslrcv = 0, sslsnd = 0 tell me if TLS speed is better or not set 'TCPBufferSize' to : tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv = 1024000, sslsnd = 1024000 are there any performance improvements? Thomas Von:K Post An: ASSP developm