> In our low-traffic server we have always kept the default value for IMAP > mail_max_userip_connections (10). > > The server has been working fine! (Thank you Timo for this!) > > However, recently we have been having: > > Maximum number of connections from user+IP exceeded > > errors both for IMAP and webmail users. > > Thus, we have now changed the value to 100. > > The questions: > > 1.Might this lead to overloading the server? > 2. Could another dovecot setting prevent the above setting from being > applied (e.g. due to connections exhaustion), i.e. should we also change > other setting(s)? > 3. What should we take into account when deciding the value for > mail_max_userip_connections?It depends on how many users you have, the number of simultaneous clients they use, and the #connections each client opens. Potentially, you could exhaust connection limits -- they usually don't max out memory or CPU or disk since most of the connections are idle. (There is a new IDLE hibernate feature that might help to minimize memory use by idle imap worker processes.) I haven't found a value that gets rid of users running into connection limits. If I set it to n, the next day someone will choke on n+1. This is a snapshot connections (count : #connections) which shows the typical decay: 25 1 14 2 14 3 7 4 9 5 1 6 2 7 1 8 1 10 Occasionally, some user's connection demand will spike and exceed the limit because - they started yat another client - they started global operation like searching - they're using a network that support roaming IP (I've tracked some users across the city on their bus ride.) Pragmatically, I set it high enough so that it meets the need of most clients, then deal with problems on a case by case basis (e.g. get them to lower their mail client's idle connection setting, or asking them to reduce the number of active clients by logging out). It also prevents what this setting was designed for: connection starvation by busy/buggy clients. Usually, hitting the limit doesn't produce problems as mail clients are smart enough to close idle connections or reuse them. If you only got a dozen users, setting it to 100 is feasible. If you got 1000 users, probably not.> 4. How can we set a different value to this directive for webmail > connections (coming from 127.0.0.1, ::1)?I don't know if there is another method, but at the very least, you can start another dovecot instance with another config file that does specific things for 127.0.0.1. Joseph Tam <jtam.home at gmail.com>
Nikolaos Milas
2016-Jan-19 12:08 UTC
Increasing mail_max_userip_connections and sys resources
On 15/1/2016 10:05 ??, Joseph Tam wrote:> ... > Pragmatically, I set it high enough so that it meets the need of most > clients, then deal with problems on a case by case basis > ... >Thank you very much Joseph for your quite useful advice and experience. Are you monitoring using "doveadm who"?>> 4. How can we set a different value to this directive for webmail >> connections (coming from 127.0.0.1, ::1)? > > I don't know if there is another method, but at the very least, you > can start another dovecot instance with another config file that does > specific things for 127.0.0.1.I tried using a remote block for webmail, but without success yet. You can see my other thread (asking on "remote" | "local" blocks). All the best, Nick