Need help!!! We are using Postfix-2.6.6 with TLS running on RHEL 5.10 for production trial.
>From the email delivery log, we see delay 967 seconds. Apr 28 11:03:18 cio-krc-pf03 postfix/smtp[5015]: 9934181190: to=<turek...@buckeyemail.osu.edu>, relay=mail.us.messaging.microsoft.com[216.32.181.178]:25, delay=967, delays=0/964/1.5/1.3, dsn=2.6.0, status=sent (250 2.6.0 <27520027.166481398696426625.javamail.erequest.do.not.re...@osu.edu> [InternalId=9787221] Queued mail for delivery) We know about the definition of four a/b/c/d delays information. How do we do performance tuning to reduce delay in queue manager? # Message delivery time stamps # delays=a/b/c/d, where # a = time before queue manager, including message transmission # b = time in queue manager # c = connection setup including DNS, HELO and TLS; # d = message transmission time Here are our configurations about TLS in Postfix configuration file /etc/postfix/main.cf. Other default parameters are used. We do not change them. ################## # # Configure TLS client to FOPE/ZIX # ################# smtp_tls_security_level = encrypt smtp_tls_loglevel = 2 smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache smtp_tls_note_starttls_offer = yes # # Enable "smtp_tls_CAfile" to fix the warning in the log /var/log/maillog # "Untrusted TLS connection established to mail.us.messaging.microsoft.com[216.32.180.22]:25: # TLSv1 with cipher AES128-SHA (128/128 bits)" # smtp_tls_CAfile = /etc/postfix/service_certs/osu_ues/DigiCertCA.crt # #################### # Configure TLS server #################### smtpd_tls_security_level = may smtpd_tls_key_file = /etc/postfix/service_certs/osu_ues/OSU_UES_WC_Cert_Ex_key.pem smtpd_tls_cert_file = /etc/postfix/service_certs/osu_ues/OSU_UES_WC_Cert_Ex_certificate.pem smtpd_tls_CAfile = /etc/postfix/service_certs/osu_ues/DigiCertCA.crt smtpd_tls_CApath = /etc/postfix/service_certs/osu_ues smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache We have other servers running Postfix-2.6.6 with TLS on RHEL 6.4 and email delivery is very fast below. The parameters for TLS and other default parameters are same as above Postfix running on RHEL 5.10 server. Apr 28 10:58:11 cio-krc-pf07 postfix/smtp[16802]: 64DA2500066: to=<neff....@buckeyemail.osu.edu>, relay=mail.us.messaging.microsoft.com[216.32.180.22]:25, delay=0.72, delays=0/0/0.28/0.44, dsn=2.6.0, status=sent (250 2.6.0 <fafe453d676b3e3e740bc382f3bfc...@careers-osu-csm.symplicity.com> [InternalId=19618080] Queued mail for delivery). Thanks to all, Carl Xie OCIO/Enterprise messaging Group Ohio State University
