On Fri, Mar 08, 2013 at 10:20:20AM -0800, Quanah Gibson-Mount wrote: > My point is that > the connections are not as persistent as one may desire. ;) I.e., > OpenDKIM stays connected forever until the server closes.
This is not a feature, it is a bug. OpenDKIM is a multi-threaded process that does not periodically exit to be replaced by a fresh process. As such it does not tolerate memory leaks in its own code or in the libraries it uses. Postfix avoids this design pattern as much as possible. Other than the tiny master server, only the queue manager (which does no table lookups directly, and does not use SSL, GSSAPI, LDAP, ...), the pickup server and tlsmgr run indefinitely. All three are simple and have minimal interactions with non-Postfix resources. > Postfix > is not (currently) doing that for me, but as you note, may well be > related to the max_use setting. This is a feature. Also this keeps the load on your LDAP servers more balanced, connections don't stick to one server forever. -- Viktor.