[afnog] How to improve postfix performance?

[Jeroen Massar]

Yusif Okai wrote:
> Hi all,
>         I run postfix as my MTA for both outbound traffic and inbound
> traffic. (Postfix ver=2.3.8..). The traffic on the outboud MTA is huge
> due to the size of the client base (about 4000 users). How can  I speed
> up the delivery rate?

Start by measuring what is actually causing the slowdown:
 - Memory?
 - Disk IO?
 - Network?
 - DNS timing out? (*)
 - Connection limit
 - Remote sites fast enough?
 - Blocking/Locking due to IMAP/POP3 access?
 - Virusses/Spams swamping you?
 - SpamAssassin taking a lot of time?

* = If your reverse DNS fails or is slow remote sites will be slow in
accepting queries, same for your site, you will be slow in accepting
theirs.

Running a tool like Munin can show you quite some parameters of the
system that might be troubling the system.

4000 users is not a lot, unless you run it on a small sized machine :)
Of course you can also always consider to load balance it over
multiple machines or to split outbound etc etc...

Of course, next to that are you properly doing the standard anti spam
checks? See amongst others the little bit below.

For the rest you can always increase things like:
smtpd_client_connection_count_limit=40
smtpd_client_connection_rate_limit=100
smtpd_client_message_rate_limit=100

To a very high number, depending on your needs of course.
See the postfix docs to what they exactly do.

Greets,
 Jeroen

--
smtpd_sender_restrictions = permit_mynetworks,
reject_unknown_sender_domain, reject_unauth_pipelining,
hash:/etc/postfix/access
smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_hostname,
reject_unknown_hostname, reject_invalid_hostname, reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_client_restrictions = permit_mynetworks
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_pipelining, reject_unknown_recipient_domain,
permit_sasl_authenticated, reject_unauth_destination, check_recipient_maps


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 311 bytes
Desc: OpenPGP digital signature
Url : http://afnog.org/pipermail/afnog/attachments/20070604/da4e8cfa/attachment.bin