Performance Notes (CyrusIMAP)

taken from http://asg.web.cmu.edu/cyrus/download/imapd/install-perf.html!

Performance issues for you to consider. If you never expect to have more than 100 simultaneous users, chances are any hardware you have will be fine. If you plan on having thousands or more users, please be sure to review this section.

If your configuration directory is not /var/imap, adjust accordingly.

• /var/imap/proc - After a successful login, the imapd creates a file in var/imap/proc that is its unix process id. It also contains the name of any SELECT'd mailbox. The file is deleted when the user logs out.

Given the potential load, this is a good candidate to move elsewhere. This can be done by symlink'ing the directory to another partition. We symlink it to a directory on a memory/viritual memory filesystem (specifically Solaris' tmpfs). If you use a tmpfs type filesystem, make sure that you have sufficient memory/swap to do this.

Some people don't care about this information and just #ifdef out the code. We probably should add a configure option to do this.

• /var/imap/mailboxes.db - The mailboxes list is often the ultimate source of contention between imap processes, especially if clients are inefficient about their use of the LIST command. For this reason it is often better to use the skiplist backend which is optimized for enumeration of the database, as opposed to the default, Berkeley DB (use –with-mboxlist-db=skiplist).

Mika Iisakkila (mika.iisakkila@pingrid.fi) writes: Nevertheless, you can also tweak the Berkeley backend if you want to or have to stick with it. Cyrus doesn't do anything to increase the BDB cache size, and the default (256 kB) is way too small for any reasonably large site. With some 50000 mailboxes and random operations, I found the hit rate for default BDB cache to be 70-80%. After growing the cache size to 2M, hit rate approached 99% and disk traffic was greatly reduced since most of the operations are reads anyway. Therefore processes could complete their work and release their locks much more quickly, and the dreaded “DBERROR: xxx lockers” messages stayed at a comfortable level. You can modify the source (/lib/cyrusdb_db3.c, the setting is commented out) or you can put a DB_CONFIG file under /var/imap/db with the appropriate setting. Read more about this in the Berkeley docs before trying it, typos and incorrect settings can cause havoc.

• /var/imap/deliverdb - Unless you disable duplicate delivery suppression, each time a mail message is delivered it needs to lock the database and check to see if the message-id has been seen already. If you require really high throughput delivery, you may want to disable this feature.

We run with it enabled and it doesn't significantly impact our performance.

• /var/spool/mqueue - Sendmail can be pretty harsh on the spool partition. Having this on a separate disk is usually a good idea. Consider using LMTP and delivering from a separate machine.

• Unused SASL mechanisms - If you just build the SASL library and copied all the mechanisms into /usr/lib/sasl2, the imapd will try to use them and allocate some amount of memory. In general, the operating system will swap out those pages but you may be allocating more swap space than you need. So, look in /usr/lib/sasl2 and if you don't plan on using those mechanisms, don't leave them there.
• You may want to increase the listen queue value when starting up the master process. For example, you may want to do this if you see the Listen queue drop counter increasing quickly. For example, under Solaris, look at the variable tcpListenDrop (from netstat -sP tcp).
• Database recovery. If restarting the server takes a long time due to the cyrusdb database recovery procedure (this is usually true if you have a large number of deliveries) you should look into shortening the interval between checkpoints, controlled by the cyrusdb event in /etc/cyrus.conf. We run checkpoints every 5 minutes; the current suggested install interval is 30 minutes.
• Some filesystems support the noatime mount option. The server does not use the atime information so you can go ahead and enable this feature.
• Depending on your syslog configuration and usage volume, Cyrus may generate thousands of syslog messages. On Linux, syslog performance can be greatly improved by disabling synchronous logging (disabling fsync() after each message). Prepending filenames in /etc/syslog.conf with a “-”, e.g., “/var/log/maillog” becomes “-/var/log/maillog”, disables syslog's fsync() call after each log message. If you log many messages those fsync()s will kill your I/O throughput. Note that if you do not need the detail provided by the LOG_DEBUG level, then not logging these messages can significantly reduces the amount of log entries that cyrus makes.

In general, there's no magic bullet for performance. It depends on your hardware, your operating system, and how your users use the system. In general, an imapd process takes up anywhere from 256 Kbytes of memory to 512 Kbytes when it is first fired up. CPU has not been a big deal, but it may become more important as the imap sessions are encrypted and now that searching may be more frequent. Disk I/O is probably the most important and having a hardware RAID subsystem with an amount of write-back cache would be a good thing.

Finally, if you are talking about less than 100 interactive users it is likely that any relatively modern hardware can support it. If you are talking about having more than 1000 interactive users, you should know how to predict your utilization, go overboard on hardware, be willing to suffer growing pains, or be able to hire someone that can help.

There are a number of good performance tuning articles out for Solaris by Adrian Cockcroft. Go to your favorite search engine and look for his name.