dovecot - Sep 2021 - 100 MB RAM per clinet in an imap-proxy setup ...

> On 03/09/2021 09:35 Tobias Oetiker <tobi at oetiker.ch> wrote:
> 
> 
> Hi All,
> 
> I spent some quality time yesterday, tuning dovecot on a server which
serves as an imap-proxy in front of a zimbra setup
> the imap proxy does ldap client-cert authentication and works well. 
> 
> BUT
> 
> I found that the imap-login processes seem to gain 100 MB per connection
they are accepting ... this seems pretty hefty.
> 
> It does not seem to be a leak, since the setup is stable when client_limit
and process_limit are set appropriately.
> 
> Any ideas what part of the code I should be looking at ? Or is this a
configuration problem ?
> 
> cheers
> tobi
> 
> -- 
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
> www.oetiker.ch tobi at oetiker.ch +41 62 775 9902
I would strongly recommend using "high performance" configuration on
your proxy.

See https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode

Aki

----- On Sep 3, 2021, at 9:01 AM, Aki Tuomi aki.tuomi at open-xchange.com wrote:
>> On 03/09/2021 09:35 Tobias Oetiker <tobi at oetiker.ch> wrote:
>> 
>> 
>> Hi All,
>> 
>> I spent some quality time yesterday, tuning dovecot on a server which
serves as
>> an imap-proxy in front of a zimbra setup
>> the imap proxy does ldap client-cert authentication and works well.
>> 
>> BUT
>> 
>> I found that the imap-login processes seem to gain 100 MB per
connection they
>> are accepting ... this seems pretty hefty.
[...]
> 
> I would strongly recommend using "high performance" configuration
on your proxy.
> 
> See
https://doc.dovecot.org/admin_manual/login_processes/#high-performance-mode
yes that is what we have:

 service imap-login {
  service_count = 0
  client_limit = 380
  process_limit = 10
  vsz_limit = 39G
 }

the machine has 180 GB ram

cheers
tobi

-- 
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
www.oetiker.ch tobi at oetiker.ch +41 62 775 9902