Cyrus tweaks (slow on roundcube)

[Andre Felipe Machado]

Hello
This is difficult to diagnose, if not looking at the pool size. 
No error is logged, it is only "slow" or even suffering hiccups on extreme loads
and or under specified  cpu.

"Every time a process is started, or allocates memory, it will reduce the
entropy pool because entropy is used to randomize the placement of that memory."
https://www.reddit.com/r/linux/comments/2hu9za/watch_the_amount_of_entropy_your_system_has/ckwi415

https://www.reddit.com/r/linux/comments/2hu9za/watch_the_amount_of_entropy_your_system_has/

Maybe others have better suggestions.
Regards.
Andre Felipe



signaldeveloper at gmail.com wrote ..
> Is there some type of log I can provide from Cyrus / sasl to help diagnose this
> better to the kolab guys? Other kolab guys I know say their entropy is right where
> I'm at and they aren't experiencing these slowness issues. 
> 
> Are their sasl or Cyrus logs I can provide?
> 
> - Paul
> 
> > On Sep 10, 2015, at 5:00 PM, Andre Felipe Machado
<andremachado at techforce.com.br>
> wrote:
> > 
> > Hello,
> > Entropy of 158 is way too low for production servers. And this *MAY* cause weird
> > slowness without logging any  errors.
> > You could install "haveged" and configure for max threshold levels on production
> > servers.
> > https://packages.debian.org/search?keywords=haveged
> > 
> > Regards.
> > 
> > Andre Felipe
> > http://www.techforce.com.br
> > 
> > 
> > 
> > signaldeveloper at gmail.com wrote ..
> >> Rudy,
> >> 
> >> Entropy is 158 I just looked. And as far as compiling against urandom, to be
> > honest
> >> I'm
> >> not sure. 
> >> 
> >> - Paul
> >> 
> >> 
> >> 
> >> 
> >>> On Sep 6, 2015, at 9:50 PM, Rudy Gevaert <Rudy.Gevaert at UGent.be> wrote:
> >>> 
> >>> 
> >>> Quoting signaldeveloper at gmail.com, Mon, 07 Sep 2015:
> >>> 
> >>>> Hosts file is fine I checked that, thanks. Kolab uses 389 to  
> >>>> authenticate for everything, so Cyrus is using LDAP as you can see  
> >>>> above. I think the problem lies in the constant TLS logins into  
> >>>> Cyrus for every click:
> >>>> 
> >>>> imap[2281]: login: localhost [::1] johndoe at domain.com PLAIN+TLS User  
> >>>> logged in  
> >>>> SESSIONID=<es1.domain.com-2281-1441500890-1-15740725055571902363>
> >>>> Sep  5 20:54:51 es1 imap[2281]: USAGE johndoe at domain.com user:  
> >>>> 0.009998 sys: 0.006999
> >>>> 
> >>>> 
> >>>> Again its only one user, on roundcube... I am afraid to put any more  
> >>>> users on it. There doesn't seem to be much of performance tweaks  
> >>>> with Cyrus around the web either...
> >>> 
> >>> does your system have enough entropy?
> >>> 
> >>> Is saslauthd compiled against /dev/urandom?
> >>> 
> >>> Rudy
> >>> 
> >>> -- 
> >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>> Rudy Gevaert                             e-mail: Rudy.Gevaert at UGent.be
> >>> Directie ICT, Afdeling Infrastructuur
> >>> Groep Systemen                                      tel: +32 9 264 4750
> >>> Universiteit Gent                                   fax: +32 9 264 4994
> >>> Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
> >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> >>> 
> >>> 
> >>> ----
> >>> Cyrus Home Page: http://www.cyrusimap.org/
> >>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> >>> To Unsubscribe:
> >>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> >> ----
> >> Cyrus Home Page: http://www.cyrusimap.org/
> >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> >> To Unsubscribe:
> >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> > ----
> > Cyrus Home Page: http://www.cyrusimap.org/
> > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> > To Unsubscribe:
> > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus