Re: [Assp-test] Very slow TLS sessions - Windows server

[Thomas E. <Tho...@th...>]

Install 2.5.2(16158)
set 'TCPBufferSize' to : sslrcv = 0, sslsnd = 0 

tell me if TLS speed is better or not


set 'TCPBufferSize' to : tcprcv = 1024000 , tcpsnd = 1024000 ,sslrcv = 
1024000, sslsnd = 1024000 

are there any performance improvements?

Thomas



Von:    K Post <nnt...@gm...>
An:     ASSP development mailing list <ass...@li...>
Datum:  02.06.2016 04:55
Betreff:        Re: [Assp-test] Very slow TLS sessions - Windows server



Could this be the problem?  Is OpenSSL even used by ASSP for receiving
email? I feel like it's not, but thought I'd put this out there.

OpenSSL 1.0.1h 1.0.1h / 0.9.8
OpenSSL-lib 1.0.2g 1 Mar 2016 1.0.2g / 1.0.1h

I have OpenSSL binaries installed in c:\openssl, and that is 1.0.2g from
https://slproweb.com/products/Win32OpenSSL.html

I don't know what 1.0.1h OpenSSL ASSP is seeing. Can you tell me what 
would
need to be updated to make that be 1.0.2g AND DO WE CARE?

Could that version mismatch be causing the terrible slowness when 
receiving
large attachments?


I looked through all other modules, they're all at or later than the
recommended minimum version (updated through Activestate's PPM)

For now I've got TLS off, but that's not viable long term.

Oh and there appears to be plenty of processing power on this machine (12
cores, 2+ ghz, 32gb ram)


THANK YOU



On Wed, Jun 1, 2016 at 12:25 PM, K Post <nnt...@gm...> wrote:

> also, with DoTLS set to drop, the WebUI is 500% faster.  Doing searches 
in
> maillog returns results like a dream!
>
> On Wed, Jun 1, 2016 at 12:11 PM, K Post <nnt...@gm...> wrote:
>
>> Running 16142, though I suspect this problem has been going on for a
>> while now.
>> Windows.
>>
>> I just discovered that large inbound emails (bit attachments say over
>> 10mb) that use TLS connections are taking forever to complete.  For
>> example, a 13mb email from a gmail.com address (and confirm coming from
>> google servers) took over 15 minutes to complete.
>>
>> In my testing, I found that changing DoTLS to Drop lets large emails 
come
>> through nice and fast.  A 10mb attachment took over 12 minutes before, 
now
>> it's just a couple of seconds with TLS off.
>>
>> The powers that be want encryption on (and so do I).  I'm okay with 
slow,
>> but gmail specifically has a warning to its users after 899.9 seconds 
(15
>> minutes).  If it takes longer than that, they get a delay warning which
>> causes all kinds of confusion.
>>
>> Any suggestions on how to figure out what's taking so long with TLS on?
>> All modules up to date.
>>
>> Thank you.
>>
>>
>>
>>
>>
>>
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and 
traffic
patterns at an interface-level. Reveals which users, apps, and protocols 
are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************