Cyrus tweaks (slow on roundcube)

[Andre Felipe Machado]

Hello, 
We setup haveged threshold at 2048 (its max pool size is 4096 , afaik) for our
high load cyrus imap servers.
At our cyrus imap servers the depletion bursts are amazing.....
Watch the entropy available during your peak ours and you will get an overview
of your needs.
Regards.
Andre Felipe


signaldeveloper at gmail.com wrote ..
> Andre,
> 
> Really? What should it be? I was curious and checked.. Entropy on some of my other
> big time production servers for email is only about 200) and its lightning fast?
> 
> - Paul
> 
> > On Sep 10, 2015, at 5:00 PM, Andre Felipe Machado
<andremachado at techforce.com.br>
> wrote:
> > 
> > Hello,
> > Entropy of 158 is way too low for production servers. And this *MAY* cause weird
> > slowness without logging any  errors.
> > You could install "haveged" and configure for max threshold levels on production
> > servers.
> > https://packages.debian.org/search?keywords=haveged
> > 
> > Regards.
> > 
> > Andre Felipe
> > http://www.techforce.com.br
> > 
> > 
> > 
> > signaldeveloper at gmail.com wrote ..
> >> Rudy,
> >> 
> >> Entropy is 158 I just looked. And as far as compiling against urandom, to be
> > honest
> >> I'm
> >> not sure. 
> >> 
> >> - Paul
> >> 
> >> 
> >> 
> >> 
> >>> On Sep 6, 2015, at 9:50 PM, Rudy Gevaert <Rudy.Gevaert at UGent.be> wrote:
> >>> 
> >>> 
> >>> Quoting signaldeveloper at gmail.com, Mon, 07 Sep 2015:
> >>> 
> >>>> Hosts file is fine I checked that, thanks. Kolab uses 389 to  
> >>>> authenticate for everything, so Cyrus is using LDAP as you can see  
> >>>> above. I think the problem lies in the constant TLS logins into  
> >>>> Cyrus for every click:
> >>>> 
> >>>> imap[2281]: login: localhost [::1] johndoe at domain.com PLAIN+TLS User  
> >>>> logged in  
> >>>> SESSIONID=<es1.domain.com-2281-1441500890-1-15740725055571902363>
> >>>> Sep  5 20:54:51 es1 imap[2281]: USAGE johndoe at domain.com user:  
> >>>> 0.009998 sys: 0.006999
> >>>> 
> >>>> 
> >>>> Again its only one user, on roundcube... I am afraid to put any more  
> >>>> users on it. There doesn't seem to be much of performance tweaks  
> >>>> with Cyrus around the web either...
> >>> 
> >>> does your system have enough entropy?
> >>> 
> >>> Is saslauthd compiled against /dev/urandom?
> >>> 
> >>> Rudy
> >>> 
> >>> -- 
> >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>> Rudy Gevaert                             e-mail: Rudy.Gevaert at UGent.be
> >>> Directie ICT, Afdeling Infrastructuur
> >>> Groep Systemen                                      tel: +32 9 264 4750
> >>> Universiteit Gent                                   fax: +32 9 264 4994
> >>> Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
> >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>> 
> >>> 
> >>> ----
> >>> Cyrus Home Page: http://www.cyrusimap.org/
> >>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> >>> To Unsubscribe:
> >>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> >> ----
> >> Cyrus Home Page: http://www.cyrusimap.org/
> >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> >> To Unsubscribe:
> >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> > ----
> > Cyrus Home Page: http://www.cyrusimap.org/
> > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> > To Unsubscribe:
> > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus