100 MB RAM per clinet in an imap-proxy setup ...
Hi All,
I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well.
BUT
I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty.
It does not seem to be a leak, since the setup is stable when client_limit and process_limit are set appropriately.
Any ideas what part of the code I should be looking at ? Or is this a configuration problem ?
cheers tobi
-- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi@oetiker.ch +41 62 775 9902
On 03/09/2021 09:35 Tobias Oetiker <tobi@oetiker.ch> wrote:
Hi All,
I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well.
BUT
I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty.
It does not seem to be a leak, since the setup is stable when client_limit and process_limit are set appropriately.
Any ideas what part of the code I should be looking at ? Or is this a configuration problem ?
cheers tobi
-- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi@oetiker.ch +41 62 775 9902
I would strongly recommend using "high performance" configuration on your proxy.
See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
Aki
----- On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tuomi@open-xchange.com wrote:
On 03/09/2021 09:35 Tobias Oetiker <tobi@oetiker.ch> wrote:
Hi All,
I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well.
BUT
I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty. [...]
I would strongly recommend using "high performance" configuration on your proxy.
See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
yes that is what we have:
service imap-login { service_count = 0 client_limit = 380 process_limit = 10 vsz_limit = 39G }
the machine has 180 GB ram
cheers tobi
-- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi@oetiker.ch +41 62 775 9902
On 03/09/2021 10:25 Tobias Oetiker <tobi@oetiker.ch> wrote:
----- On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tuomi@open-xchange.com wrote:
On 03/09/2021 09:35 Tobias Oetiker <tobi@oetiker.ch> wrote:
Hi All,
I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well.
BUT
I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty. [...]
I would strongly recommend using "high performance" configuration on your proxy.
See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
yes that is what we have:
service imap-login { service_count = 0 client_limit = 380 process_limit = 10 vsz_limit = 39G }
the machine has 180 GB ram
cheers tobi
-- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi@oetiker.ch +41 62 775 9902
Which version of dovecot are you running?
Aki
----- On Sep 3, 2021, at 10:06 AM, Aki Tuomi aki.tuomi@open-xchange.com wrote:
On 03/09/2021 10:25 Tobias Oetiker <tobi@oetiker.ch> wrote:
----- On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tuomi@open-xchange.com wrote:
On 03/09/2021 09:35 Tobias Oetiker <tobi@oetiker.ch> wrote:
Hi All,
I spent some quality time yesterday, tuning dovecot on a server which serves as an imap-proxy in front of a zimbra setup the imap proxy does ldap client-cert authentication and works well.
BUT
I found that the imap-login processes seem to gain 100 MB per connection they are accepting ... this seems pretty hefty. [...]
I would strongly recommend using "high performance" configuration on your proxy.
See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
yes that is what we have:
service imap-login { service_count = 0 client_limit = 380 process_limit = 10 vsz_limit = 39G }
the machine has 180 GB ram
Which version of dovecot are you running?
2.3.9
I am planning to do a testsetup and maybe add mtrace to the code to see who is using this memory ... :)
cheers tobi
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch tobi@oetiker.ch +41 62 775 9902
participants (2)
-
Aki Tuomi
-
Tobias Oetiker