Hi,
from time to time the IMAP login times out ... my external monitoring
says "connection reset by peer (SSL)" and Thunderbird tries to connect
forever. After a short while everything returns back to normal operation.
The system resources are plenty, there are no error messages and no
greedy background tasks running.
I read a little about tweaking imap-login - but all the default
parameters seem to be set more generously than what was recommended.
Where should I start the debugging process?
I really wish there was some "dovecot optimizer tool" ... :P
--
Cheers, \\|//
Vince (o o)
----------------------------ooO-(_)-Ooo-------------------------
''' (o)_(o) [ ][0][ ]
??? (=?o?=) World Domination by Copy and Paste [ ][ ][0]
- (")_(") [0][0][0]
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
Ooo.
---------------------------.ooO----( )-------------------------
( ) (_/
\_)
Am 28.05.2016 um 21:25 schrieb Vince42:> Hi, > > from time to time the IMAP login times out ... my external monitoring > says "connection reset by peer (SSL)" and Thunderbird tries to connect > forever. After a short while everything returns back to normal operation. > > The system resources are plenty, there are no error messages and no > greedy background tasks running. > > I read a little about tweaking imap-login - but all the default > parameters seem to be set more generously than what was recommended. > > Where should I start the debugging process? > > I really wish there was some "dovecot optimizer tool" ... :PThat sounds suspiciously as if you are running out of entropy. Is that a virtual machine you are running with dovecot? At time when the SSL connection cannot be established check the value of available entropy by cat /proc/sys/kernel/random/entropy_avail In case you see a low value you should consider running a daemon like haveged. Alexander
> On May 29, 2016 at 1:43 AM Alexander Dalloz <ad+lists at uni-x.org> wrote: > > > Am 28.05.2016 um 21:25 schrieb Vince42: > > Hi, > > > > from time to time the IMAP login times out ... my external monitoring > > says "connection reset by peer (SSL)" and Thunderbird tries to connect > > forever. After a short while everything returns back to normal operation. > > > > The system resources are plenty, there are no error messages and no > > greedy background tasks running. > > > > I read a little about tweaking imap-login - but all the default > > parameters seem to be set more generously than what was recommended. > > > > Where should I start the debugging process? > > > > I really wish there was some "dovecot optimizer tool" ... :P >Dovecot optimization is usually only required for large installations.> That sounds suspiciously as if you are running out of entropy. Is that a > virtual machine you are running with dovecot? > > At time when the SSL connection cannot be established check the value of > available entropy by > > cat /proc/sys/kernel/random/entropy_avail > > In case you see a low value you should consider running a daemon like > haveged. > > AlexanderAlso make sure you are not facing simple firewall or interconnectivity issue. Also usually it helps if you provide outputs from doveconf -n doveadm log errors --- Aki Tuomi
Hi, [Alexander Dalloz] - [29.05.2016 00:43]> At time when the SSL connection cannot be established check the value > of available entropy by cat /proc/sys/kernel/random/entropy_avail In > case you see a low value you should consider running a daemon like > haveged.I had the issue yesterday again and the available entropy has values between 1300 and 1500 - seems to be fine to me ... any other ideas, what I could check or monitor? -- Cheers, \\|// Vince (o o) ----------------------------ooO-(_)-Ooo------------------------- ''' (o)_(o) [ ][0][ ] ??? (=?o?=) World Domination by Copy and Paste [ ][ ][0] - (")_(") [0][0][0] () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Ooo. ---------------------------.ooO----( )------------------------- ( ) (_/ \_)