Re: Impact of SSL and Stunnel on Cyrus

2001-11-30 Thread Gary Flynn
Roland Pope wrote: > > This means that the CYRUS server box doesn't > incure the overhead of having to negotiate 2 TCP conenctions for every 1 client, > as well as the SSL negotiation overhead. Do you think I could resolve this satisfactorily by simply adding a couple more processors to the box?

Re: Impact of SSL and Stunnel on Cyrus

2001-11-29 Thread Tom Karches
Roland Pope wrote: > > >>would split your users to multiple servers to start with. Or use >>front ends which is the TLS endpoint, and proxies the session to the >>right server, then the mail server doesn't need to do TLS as well. >> >> > I agree. We use stunnel on seperate machines to provid

Re: Impact of SSL and Stunnel on Cyrus

2001-11-29 Thread Roland Pope
> Gary Flynn <[EMAIL PROTECTED]> writes: > > > I'd be interested in hearing about others' experiences on > > the impact of stunnel or SASL on server resources. Any > > thoughts on the relative merits of either architecture > > of providing SSL sessions would also be appreciated. We'll > > need t

Re: Impact of SSL and Stunnel on Cyrus

2001-11-29 Thread Simon Josefsson
Gary Flynn <[EMAIL PROTECTED]> writes: > I'd be interested in hearing about others' experiences on > the impact of stunnel or SASL on server resources. Any > thoughts on the relative merits of either architecture > of providing SSL sessions would also be appreciated. We'll > need to protect both

Impact of SSL and Stunnel on Cyrus

2001-11-29 Thread Gary Flynn
I'd be interested in hearing about others' experiences on the impact of stunnel or SASL on server resources. Any thoughts on the relative merits of either architecture of providing SSL sessions would also be appreciated. We'll need to protect both the IMAP and IMSP sessions. Some background: 1)