On Thu, Oct 29, 2009 at 02:45:00PM +0100, Rene Bartsch wrote:
> > Otherwise, run a test Postfix instance with a default configuration,
> > and add one feature at a time, until the memory footprint jumps...
>
> The memory usage is caused by
>
> smtpd_recipient_restrictions =
> check_client_access cidr:/etc/postfix/dnswl/postfix-dnswl-header,
> check_client_access cidr:/etc/postfix/dnswl/postfix-dnswl-permit,
CIDR tables are held in memory. As Wietse mentions, you can use proxymap
as a "shared-memory" cache for this.
> This are whitelists downloaded from DNSWL every night. Each file is
> about 4 MBytes and bloats EACH smtpd-process by 10 MBytes.
Exactly as expected.
> Is it normal that TLS bloats each smtpd-process by about 1 Mbyte?
I have smtpd(8) with TLS enabled, the bss+heap size is 516K:
000000000056c000 516K rwx-- [ anon ]
0000002a9556b000 4K rw--- [ anon ]
0000002a95796000 4K rw--- [ anon ]
0000002a95b05000 4K rw--- [ anon ]
0000002a95d72000 12K rw--- [ anon ]
0000002a95e99000 4K rw--- [ anon ]
0000002a95faf000 8K rw--- [ anon ]
0000002a960c4000 8K rw--- [ anon ]
0000002a962f7000 20K rw--- [ anon ]
0000002a96510000 24K rw--- [ anon ]
0000007fbfffb000 20K rwx-- [ stack ]
ffffffffff600000 4K r-x-- [ anon ]
The same binary on the same machine in another instance with no TLS
has:
000000000056c000 256K rwx-- [ anon ]
0000002a9556b000 4K rw--- [ anon ]
0000002a95796000 4K rw--- [ anon ]
0000002a95b05000 4K rw--- [ anon ]
0000002a95d72000 12K rw--- [ anon ]
0000002a95e99000 4K rw--- [ anon ]
0000002a95faf000 8K rw--- [ anon ]
0000002a960c4000 8K rw--- [ anon ]
0000002a962f7000 20K rw--- [ anon ]
0000002a96510000 24K rw--- [ anon ]
ffffffffff600000 4K r-x-- [ anon ]
So I don't see 1MB of TLS overhead. This on a 64-bit machine, with
"wide" pointers.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[email protected]?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
