We don't have any clients directly connecting to ASSP (outbound mail is
relayed in from Exchange), but see severe slowness with other servers
connecting that use TLS.
I can't imagine it's the SMTP server itself. I feel like I've got some
kind of conflict on the server that's not letting ASSP work efficiently
processing TLS sessions. I'm running the same ASSP code as everyone else,
but others aren't reporting the slowness, so I doubt it's the code. I just
don't know where else to look.
On Thu, Jun 16, 2016 at 6:07 AM, Pontus Hellgren <
[email protected]> wrote:
> Hi there!
>
> Default 1024000 should generate an error since 999999 is maximum, 102400
> should work fine.
>
> I have been playing around this to see if any configuration would help my
> TLS-problems, but they are still there.
> And still only for apple devices. (any one else?)
>
> TLS sessions will transfer but there will be no end until MTA times out the
> session.
>
> Client, ASSP or Server problem?
> Well, out server(MTA) version have not changed, Apple clients and ASSP
> versions has changed.
> So, ASSP or Apple?
>
> Regards,
> Pontus
>
> -----Ursprungligt meddelande-----
> Från: Thomas Eckardt [mailto:[email protected]]
> Skickat: den 9 juni 2016 10:40
> Till: ASSP development mailing list <[email protected]>
> Ämne: Re: [Assp-test] Very slow TLS sessions - Windows server
>
> Install 2.5.2(16158)
> set 'TCPBufferSize' to : sslrcv = 0, sslsnd = 0
>
> tell me if TLS speed is better or not
>
>
> set 'TCPBufferSize' to : tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv =
> 1024000, sslsnd = 1024000
>
> are there any performance improvements?
>
> Thomas
>
>
>
> Von: K Post <[email protected]>
> An: ASSP development mailing list <[email protected]>
> Datum: 02.06.2016 04:55
> Betreff: Re: [Assp-test] Very slow TLS sessions - Windows server
>
>
>
> Could this be the problem? Is OpenSSL even used by ASSP for receiving
> email? I feel like it's not, but thought I'd put this out there.
>
> OpenSSL 1.0.1h 1.0.1h / 0.9.8
> OpenSSL-lib 1.0.2g 1 Mar 2016 1.0.2g / 1.0.1h
>
> I have OpenSSL binaries installed in c:\openssl, and that is 1.0.2g from
> https://slproweb.com/products/Win32OpenSSL.html
>
> I don't know what 1.0.1h OpenSSL ASSP is seeing. Can you tell me what would
> need to be updated to make that be 1.0.2g AND DO WE CARE?
>
> Could that version mismatch be causing the terrible slowness when receiving
> large attachments?
>
>
> I looked through all other modules, they're all at or later than the
> recommended minimum version (updated through Activestate's PPM)
>
> For now I've got TLS off, but that's not viable long term.
>
> Oh and there appears to be plenty of processing power on this machine (12
> cores, 2+ ghz, 32gb ram)
>
>
> THANK YOU
>
>
>
> On Wed, Jun 1, 2016 at 12:25 PM, K Post <[email protected]> wrote:
>
> > also, with DoTLS set to drop, the WebUI is 500% faster. Doing
> > searches
> in
> > maillog returns results like a dream!
> >
> > On Wed, Jun 1, 2016 at 12:11 PM, K Post <[email protected]> wrote:
> >
> >> Running 16142, though I suspect this problem has been going on for a
> >> while now.
> >> Windows.
> >>
> >> I just discovered that large inbound emails (bit attachments say over
> >> 10mb) that use TLS connections are taking forever to complete. For
> >> example, a 13mb email from a gmail.com address (and confirm coming
> >> from google servers) took over 15 minutes to complete.
> >>
> >> In my testing, I found that changing DoTLS to Drop lets large emails
> come
> >> through nice and fast. A 10mb attachment took over 12 minutes
> >> before,
> now
> >> it's just a couple of seconds with TLS off.
> >>
> >> The powers that be want encryption on (and so do I). I'm okay with
> slow,
> >> but gmail specifically has a warning to its users after 899.9 seconds
> (15
> >> minutes). If it takes longer than that, they get a delay warning
> >> which causes all kinds of confusion.
> >>
> >> Any suggestions on how to figure out what's taking so long with TLS on?
> >> All modules up to date.
> >>
> >> Thank you.
> >>
> >>
> >>
> >>
> >>
> >>
> >
>
> ----------------------------------------------------------------------------
> --
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no known
> virus in this email!
> *******************************************************
>
>
>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
> reports.
> http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
