Just made a test with my nice very old windows 2003 Sp1. It runs the
default system TCP buffers at 8KB. The max wirespeed for this system is
16MBit/s inbound and 6MBit/s outbound. There is alot of other stuff using
this line.
Doing a mail with SSLin and SSLout to the ISP and back, I get the
following speed (including all the ASSP checks - clamav, file scanner,
attachment full check .... for example).
outbound send : 17:21:48 - 17:22:42 - size 5.19 MByte - avg. speed 5,8
MB/min
inbound receive: 17:22:45 - 17:23:17 - size 5.19 MByte - avg. speed 9,8
MB/min
Thomas
Von: K Post <nntp.p...@gmail.com>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum: 09.06.2016 16:54
Betreff: Re: [Assp-test] Very slow TLS sessions - Windows server
Updated to the newest version.
When I did
sslrcv = 0, sslsnd=0
I get, in green:
*** Updated TCPBufferSize - TCP Receive Buffer is set to 65536 byte (note
missing line break)
*TCPBufferSize - TCP Send Buffer is set to 65536 byte*
*TCPBufferSize - SSL Receive Buffer is set to 65536 byte*
*TCPBufferSize - SSL Send Buffer is set to 65536 byte*
With those settings and TLS back on, it's transferring at around 1.25MB
per
minute. That ONE test is slightly better than before, but still pretty
bad.
I tried setting all 4 to 1024000, but can't. When I copy in what you
typed, I get a javascript popup saying
*Invalid 'TCPBufferSize' - unchanged*
and in the GUI under TCPBufferSize there's a red error message:
**** Invalid: 'tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv = 1024000,
sslsnd = 1024000' (check returned '')*
I tried with the comma right after 1024000 and more traditional spacing,
same warning.
The GUI says max value is 999,999 but you've got 1,024,000 *I don't know
if you mean just 1024, added a zero or what...*
*THANK YOU*
On Thu, Jun 9, 2016 at 4:40 AM, Thomas Eckardt
<thomas.ecka...@thockar.com>
wrote:
> Install 2.5.2(16158)
> set 'TCPBufferSize' to : sslrcv = 0, sslsnd = 0
>
> tell me if TLS speed is better or not
>
>
> set 'TCPBufferSize' to : tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv =
> 1024000, sslsnd = 1024000
>
> are there any performance improvements?
>
> Thomas
>
>
>
> Von: K Post <nntp.p...@gmail.com>
> An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> Datum: 02.06.2016 04:55
> Betreff: Re: [Assp-test] Very slow TLS sessions - Windows server
>
>
>
> Could this be the problem? Is OpenSSL even used by ASSP for receiving
> email? I feel like it's not, but thought I'd put this out there.
>
> OpenSSL 1.0.1h 1.0.1h / 0.9.8
> OpenSSL-lib 1.0.2g 1 Mar 2016 1.0.2g / 1.0.1h
>
> I have OpenSSL binaries installed in c:\openssl, and that is 1.0.2g from
> https://slproweb.com/products/Win32OpenSSL.html
>
> I don't know what 1.0.1h OpenSSL ASSP is seeing. Can you tell me what
> would
> need to be updated to make that be 1.0.2g AND DO WE CARE?
>
> Could that version mismatch be causing the terrible slowness when
> receiving
> large attachments?
>
>
> I looked through all other modules, they're all at or later than the
> recommended minimum version (updated through Activestate's PPM)
>
> For now I've got TLS off, but that's not viable long term.
>
> Oh and there appears to be plenty of processing power on this machine
(12
> cores, 2+ ghz, 32gb ram)
>
>
> THANK YOU
>
>
>
> On Wed, Jun 1, 2016 at 12:25 PM, K Post <nntp.p...@gmail.com> wrote:
>
> > also, with DoTLS set to drop, the WebUI is 500% faster. Doing
searches
> in
> > maillog returns results like a dream!
> >
> > On Wed, Jun 1, 2016 at 12:11 PM, K Post <nntp.p...@gmail.com> wrote:
> >
> >> Running 16142, though I suspect this problem has been going on for a
> >> while now.
> >> Windows.
> >>
> >> I just discovered that large inbound emails (bit attachments say over
> >> 10mb) that use TLS connections are taking forever to complete. For
> >> example, a 13mb email from a gmail.com address (and confirm coming
from
> >> google servers) took over 15 minutes to complete.
> >>
> >> In my testing, I found that changing DoTLS to Drop lets large emails
> come
> >> through nice and fast. A 10mb attachment took over 12 minutes
before,
> now
> >> it's just a couple of seconds with TLS off.
> >>
> >> The powers that be want encryption on (and so do I). I'm okay with
> slow,
> >> but gmail specifically has a warning to its users after 899.9 seconds
> (15
> >> minutes). If it takes longer than that, they get a delay warning
which
> >> causes all kinds of confusion.
> >>
> >> Any suggestions on how to figure out what's taking so long with TLS
on?
> >> All modules up to date.
> >>
> >> Thank you.
> >>
> >>
> >>
> >>
> >>
> >>
> >
>
>
------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports.
https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential,
legally
> privileged and protected in law and are intended solely for the use of
the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
>
------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports.
https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and
traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
