921600 isn't markedly different gives me something like 1.5 to 2 MB per
minute. I am using just the shutdown list and watching the bytes and time
to get the estimate.
I can enable debugging to get a more precise number, but it's a moot point
I think - without TLS, I just watched an 11mb attachment come through with
a total processing time of 9 seconds, so about 75MB per minute including
the overhead of starting the session. Call it 50x faster to have tls off.
Something doesn't seem right.
On Thu, Jun 9, 2016 at 11:16 AM, Thomas Eckardt <[email protected]>
wrote:
> I'm sorry my fault - 999999 is the hardcoded maximum at the moment. Use
> 921600 (900 KB) for all settings.
>
> >transferring at around 1.25MB per minute
>
> You've got the value from the connection screen? Looks very slow.
>
> with SessionLog set to diagnostic
> you'll see the message in the log:
> ..... info: received and processed all DATA
> if all data are received and processed
>
> and with ConnectionLog set to verbose
> ..... info: all DATA written to server - sent [CR][LF].[CR][LF]
> if all data are sent to the MTA
>
> from
> ..... Connected: session:7DA767C 193.169.181.20:56385 >.....
> to
> ..... info: received and processed all DATA
>
> you can calculate the time to receive the data
>
> from:
> ..... info: received and processed all DATA
> to
> ..... info: all DATA written to server - sent [CR][LF].[CR][LF]
>
> you can calculate the time to send all data
>
>
> Thomas
>
>
>
>
>
>
>
> Von: K Post <[email protected]>
> An: ASSP development mailing list <[email protected]>
> Datum: 09.06.2016 16:54
> Betreff: Re: [Assp-test] Very slow TLS sessions - Windows server
>
>
>
> Updated to the newest version.
>
> When I did
> sslrcv = 0, sslsnd=0
> I get, in green:
>
> *** Updated TCPBufferSize - TCP Receive Buffer is set to 65536 byte (note
> missing line break)
> *TCPBufferSize - TCP Send Buffer is set to 65536 byte*
> *TCPBufferSize - SSL Receive Buffer is set to 65536 byte*
> *TCPBufferSize - SSL Send Buffer is set to 65536 byte*
>
> With those settings and TLS back on, it's transferring at around 1.25MB
> per
> minute. That ONE test is slightly better than before, but still pretty
> bad.
>
>
> I tried setting all 4 to 1024000, but can't. When I copy in what you
> typed, I get a javascript popup saying
> *Invalid 'TCPBufferSize' - unchanged*
>
> and in the GUI under TCPBufferSize there's a red error message:
> **** Invalid: 'tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv = 1024000,
> sslsnd = 1024000' (check returned '')*
>
> I tried with the comma right after 1024000 and more traditional spacing,
> same warning.
>
> The GUI says max value is 999,999 but you've got 1,024,000 *I don't know
> if you mean just 1024, added a zero or what...*
>
> *THANK YOU*
>
>
>
> On Thu, Jun 9, 2016 at 4:40 AM, Thomas Eckardt
> <[email protected]>
> wrote:
>
> > Install 2.5.2(16158)
> > set 'TCPBufferSize' to : sslrcv = 0, sslsnd = 0
> >
> > tell me if TLS speed is better or not
> >
> >
> > set 'TCPBufferSize' to : tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv =
> > 1024000, sslsnd = 1024000
> >
> > are there any performance improvements?
> >
> > Thomas
> >
> >
> >
> > Von: K Post <[email protected]>
> > An: ASSP development mailing list <[email protected]>
> > Datum: 02.06.2016 04:55
> > Betreff: Re: [Assp-test] Very slow TLS sessions - Windows server
> >
> >
> >
> > Could this be the problem? Is OpenSSL even used by ASSP for receiving
> > email? I feel like it's not, but thought I'd put this out there.
> >
> > OpenSSL 1.0.1h 1.0.1h / 0.9.8
> > OpenSSL-lib 1.0.2g 1 Mar 2016 1.0.2g / 1.0.1h
> >
> > I have OpenSSL binaries installed in c:\openssl, and that is 1.0.2g from
> > https://slproweb.com/products/Win32OpenSSL.html
> >
> > I don't know what 1.0.1h OpenSSL ASSP is seeing. Can you tell me what
> > would
> > need to be updated to make that be 1.0.2g AND DO WE CARE?
> >
> > Could that version mismatch be causing the terrible slowness when
> > receiving
> > large attachments?
> >
> >
> > I looked through all other modules, they're all at or later than the
> > recommended minimum version (updated through Activestate's PPM)
> >
> > For now I've got TLS off, but that's not viable long term.
> >
> > Oh and there appears to be plenty of processing power on this machine
> (12
> > cores, 2+ ghz, 32gb ram)
> >
> >
> > THANK YOU
> >
> >
> >
> > On Wed, Jun 1, 2016 at 12:25 PM, K Post <[email protected]> wrote:
> >
> > > also, with DoTLS set to drop, the WebUI is 500% faster. Doing
> searches
> > in
> > > maillog returns results like a dream!
> > >
> > > On Wed, Jun 1, 2016 at 12:11 PM, K Post <[email protected]> wrote:
> > >
> > >> Running 16142, though I suspect this problem has been going on for a
> > >> while now.
> > >> Windows.
> > >>
> > >> I just discovered that large inbound emails (bit attachments say over
> > >> 10mb) that use TLS connections are taking forever to complete. For
> > >> example, a 13mb email from a gmail.com address (and confirm coming
> from
> > >> google servers) took over 15 minutes to complete.
> > >>
> > >> In my testing, I found that changing DoTLS to Drop lets large emails
> > come
> > >> through nice and fast. A 10mb attachment took over 12 minutes
> before,
> > now
> > >> it's just a couple of seconds with TLS off.
> > >>
> > >> The powers that be want encryption on (and so do I). I'm okay with
> > slow,
> > >> but gmail specifically has a warning to its users after 899.9 seconds
> > (15
> > >> minutes). If it takes longer than that, they get a delay warning
> which
> > >> causes all kinds of confusion.
> > >>
> > >> Any suggestions on how to figure out what's taking so long with TLS
> on?
> > >> All modules up to date.
> > >>
> > >> Thank you.
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >
> >
> >
>
> ------------------------------------------------------------------------------
> > What NetFlow Analyzer can do for you? Monitors network bandwidth and
> > traffic
> > patterns at an interface-level. Reveals which users, apps, and protocols
> > are
> > consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> > J-Flow, sFlow and other flows. Make informed decisions using capacity
> > planning reports.
> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> > _______________________________________________
> > Assp-test mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
> >
> >
> >
> > DISCLAIMER:
> > *******************************************************
> > This email and any files transmitted with it may be confidential,
> legally
> > privileged and protected in law and are intended solely for the use of
> the
> >
> > individual to whom it is addressed.
> > This email was multiple times scanned for viruses. There should be no
> > known virus in this email!
> > *******************************************************
> >
> >
> >
> >
>
> ------------------------------------------------------------------------------
> > What NetFlow Analyzer can do for you? Monitors network bandwidth and
> > traffic
> > patterns at an interface-level. Reveals which users, apps, and protocols
> > are
> > consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> > J-Flow, sFlow and other flows. Make informed decisions using capacity
> > planning reports.
> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> > _______________________________________________
> > Assp-test mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
> >
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
