Re: SMTP connection reuse with TLS

2017-08-02 Thread Viktor Dukhovni
On Wed, Aug 02, 2017 at 08:03:14PM +0200, Marco Pizzoli wrote: > > Yes, but Berkeley DB also works well enough in practice. > > > > I believe you. But my experience comparing the two in OpenLDAP is strongly > toward lmdb. The Postfix SMTP cache is a very different use-case. The main incentive t

Re: SMTP connection reuse with TLS

2017-08-02 Thread Marco Pizzoli
On Wed, Aug 2, 2017 at 7:44 PM, Viktor Dukhovni wrote: > On Wed, Aug 02, 2017 at 07:11:23PM +0200, Marco Pizzoli wrote: > > > Have a look at: > > - smtp_tls_session_cache_database <-- this is the most important thing. > I > > suggest lmdb as the backing store > > Yes, but Berkeley DB also works w

Re: SMTP connection reuse with TLS

2017-08-02 Thread Viktor Dukhovni
On Wed, Aug 02, 2017 at 07:11:23PM +0200, Marco Pizzoli wrote: > Have a look at: > - smtp_tls_session_cache_database <-- this is the most important thing. I > suggest lmdb as the backing store Yes, but Berkeley DB also works well enough in practice. > - if you are on Linux on virtual, also to RN

Re: SMTP connection reuse with TLS

2017-08-02 Thread Viktor Dukhovni
On Wed, Aug 02, 2017 at 09:57:43AM -0700, mark burdett wrote: > > Increased latency can be amortized with increased concurrency. > > Just open more connections and the overall throughput rate will > > remain the same. > > > > Throughput = Concurrency / Latency > > That's true, as a work-arou

Re: SMTP connection reuse with TLS

2017-08-02 Thread Marco Pizzoli
On Wed, Aug 2, 2017 at 6:57 PM, mark burdett wrote: > That's true, as a work-around. Unfortunately we're talking about not just > opening a new TCP connection but also reestablishing TLS, which means yet > more RTT and CPU. So the increased concurrency will be significant and > will require up

Re: SMTP connection reuse with TLS

2017-08-02 Thread mark burdett
On 08/01/2017 03:32 PM, Viktor Dukhovni wrote: On Tue, Aug 01, 2017 at 02:41:52PM -0700, mark burdett wrote: Hi, I was curious if there are any plans for postfix to eventually support SMTP connection reuse with STARTTLS. This requires a complex outbound TLS proxy to cache the connections in p

Re: SMTP connection reuse with TLS

2017-08-02 Thread Benny Pedersen
Where is logs ? And lastly postconf -nf postconf -Mf from both servers, with that its more chance of more help

Re: SMTP connection reuse with TLS

2017-08-01 Thread Viktor Dukhovni
On Tue, Aug 01, 2017 at 02:41:52PM -0700, mark burdett wrote: > Hi, I was curious if there are any plans for postfix to eventually support > SMTP connection reuse with STARTTLS. This requires a complex outbound TLS proxy to cache the connections in process, and handle peer authentication. Some o