Hello, We setup haveged threshold at 2048 (its max pool size is 4096 , afaik) for our high load cyrus imap servers. At our cyrus imap servers the depletion bursts are amazing..... Watch the entropy available during your peak ours and you will get an overview of your needs. Regards. Andre Felipe signaldeveloper@xxxxxxxxx wrote .. > Andre, > > Really? What should it be? I was curious and checked.. Entropy on some of my other > big time production servers for email is only about 200) and its lightning fast? > > - Paul > > > On Sep 10, 2015, at 5:00 PM, Andre Felipe Machado <andremachado@xxxxxxxxxxxxxxxx> > wrote: > > > > Hello, > > Entropy of 158 is way too low for production servers. And this *MAY* cause weird > > slowness without logging any errors. > > You could install "haveged" and configure for max threshold levels on production > > servers. > > https://packages.debian.org/search?keywords=haveged > > > > Regards. > > > > Andre Felipe > > http://www.techforce.com.br > > > > > > > > signaldeveloper@xxxxxxxxx wrote .. > >> Rudy, > >> > >> Entropy is 158 I just looked. And as far as compiling against urandom, to be > > honest > >> I'm > >> not sure. > >> > >> - Paul > >> > >> > >> > >> > >>> On Sep 6, 2015, at 9:50 PM, Rudy Gevaert <Rudy.Gevaert@xxxxxxxx> wrote: > >>> > >>> > >>> Quoting signaldeveloper@xxxxxxxxx, Mon, 07 Sep 2015: > >>> > >>>> Hosts file is fine I checked that, thanks. Kolab uses 389 to > >>>> authenticate for everything, so Cyrus is using LDAP as you can see > >>>> above. I think the problem lies in the constant TLS logins into > >>>> Cyrus for every click: > >>>> > >>>> imap[2281]: login: localhost [::1] johndoe@xxxxxxxxxx PLAIN+TLS User > >>>> logged in > >>>> SESSIONID=<es1.domain.com-2281-1441500890-1-15740725055571902363> > >>>> Sep 5 20:54:51 es1 imap[2281]: USAGE johndoe@xxxxxxxxxx user: > >>>> 0.009998 sys: 0.006999 > >>>> > >>>> > >>>> Again its only one user, on roundcube... I am afraid to put any more > >>>> users on it. There doesn't seem to be much of performance tweaks > >>>> with Cyrus around the web either... > >>> > >>> does your system have enough entropy? > >>> > >>> Is saslauthd compiled against /dev/urandom? > >>> > >>> Rudy > >>> > >>> -- > >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > >>> Rudy Gevaert e-mail: Rudy.Gevaert@xxxxxxxx > >>> Directie ICT, Afdeling Infrastructuur > >>> Groep Systemen tel: +32 9 264 4750 > >>> Universiteit Gent fax: +32 9 264 4994 > >>> Krijgslaan 281, gebouw S9, 9000 Gent, Belgie www.UGent.be > >>> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > >>> > >>> > >>> ---- > >>> Cyrus Home Page: http://www.cyrusimap.org/ > >>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > >>> To Unsubscribe: > >>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > >> ---- > >> Cyrus Home Page: http://www.cyrusimap.org/ > >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > >> To Unsubscribe: > >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > > ---- > > Cyrus Home Page: http://www.cyrusimap.org/ > > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > > To Unsubscribe: > > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
