Showing posts with label traffic control. Show all posts
Showing posts with label traffic control. Show all posts
Thursday, November 6, 2008
Friday, October 3, 2008
The Architecture Of Traffic Control 3.1
This is a response to a question to a question we recently received.
The architecture of the latest version of Traffic Control uses several processes. One process for management, one for logging and then several (default of 3) child processes that are single threaded processes. We have found this single threaded architecture is the most efficient way to handle large volumes of connections. Using mulitple child processes allows us to spread the work across several processors or cores and also allows us to continue processing and renewing processes if any problem were to occur. Also, this allows us to use very few persistent connections to your email server.
We do everything inline. We do recipient validation with your email server, and when we have fully accepted the email and it has passed all our tests it is passed to your email server. We then proxy back the response from the email server to the connecting client. Once again, this is done inline. This is very efficient since the load on the email server is usually vastly reduced due to the number of connections that are removed by our throttling and RBL checks.
Your traffic control looks like a very interesting approach, but there are
a couple of questions I have that your online documentation didn't seem to
answer:
1. One problem I have is that I'm using Apple XServes running OSX 10.5,
which has a hard coded limit of 2500 processes per server. I'm running Exim
which launches one process per email delivery. Does Traffic Control do the
same? If not (eg, it might use a thread per incoming mail connection), then
it could be very useful.
The architecture of the latest version of Traffic Control uses several processes. One process for management, one for logging and then several (default of 3) child processes that are single threaded processes. We have found this single threaded architecture is the most efficient way to handle large volumes of connections. Using mulitple child processes allows us to spread the work across several processors or cores and also allows us to continue processing and renewing processes if any problem were to occur. Also, this allows us to use very few persistent connections to your email server.
2. Does traffic control act as a pass-through SMTP proxy, or does it accept
email, then relay it. This makes a big difference to my rejection policy. I
like to reject at SMTP time, instead of accepting then possibly bouncing
email.
We do everything inline. We do recipient validation with your email server, and when we have fully accepted the email and it has passed all our tests it is passed to your email server. We then proxy back the response from the email server to the connecting client. Once again, this is done inline. This is very efficient since the load on the email server is usually vastly reduced due to the number of connections that are removed by our throttling and RBL checks.
Labels:
apple xserves,
architecture,
email server,
exim,
inline,
mta,
rbl,
single threaded,
smtp,
traffic control
Friday, September 26, 2008
Using syslog with Traffic Control
The file you need to edit is /opt/TrafficControl/conf/log.conf
If you want to direct the Traffic Control log into syslog as well then you can change
to
You can also append ", Syslog" onto the end of the other logs if you wish.
Once the file is edited you can call reload-proxy.sh
If you want to direct the Traffic Control log into syslog as well then you can change
log4perl.logger.traffic_logger = INFO, TrafficLogfile
to
log4perl.logger.traffic_logger = INFO, TrafficLogfile, Syslog
You can also append ", Syslog" onto the end of the other logs if you wish.
log4perl.logger.error_logger = ERROR, ErrorLogfile
log4perl.logger.debug_logger = FATAL, DebugLogfile
Once the file is edited you can call reload-proxy.sh
sudo /opt/TrafficControl/scripts/reload-proxy.sh
Labels:
administration,
log files,
logging,
splunk,
syslog,
traffic control
Tuesday, July 22, 2008
Installing MailChannels Traffic Control In 90 Seconds!
My previous installation video for MailChannels Traffic Control was 6 minutes long (long!). It actually only takes about 90 seconds to install Traffic Control on your server, so I recorded this video to show that and also save time for those sysadmins that only have 90 seconds and not 6 minutes.
Please visit mailchannels.com/download to freely download Traffic Control
Please visit mailchannels.com/download to freely download Traffic Control
Labels:
demo,
download,
howto,
install.sh,
installation,
tar.gz,
traffic control,
tutorial,
video,
vimeo
Friday, July 11, 2008
Where to find the Traffic Control Manual
I had an email this morning from somebody using Traffic Control who wanted to know if there is an online version of the user manual. Yes there is. It can be found in the following locations.
Traffic Control Manual (HTML)
Traffic Control Manual (PDF)
Some key chapters that you'll want to check out are
Traffic Control Manual (HTML)
Traffic Control Manual (PDF)
Some key chapters that you'll want to check out are
Labels:
documentation,
html,
manual,
pdf,
traffic control
Thursday, July 10, 2008
Less Configuration = More Time For Beer
I've been looking at all the configuration parameters that are recommended for configuring Postfix for anti-spam prevention, and there's quite a lot to learn.
This Postfix webpage gives a pretty thorough explanation and it's all good stuff.
http://www.postfix.org/uce.html
But with this many configuration parameters there's a lot of tweaking to do to get good spam protection.
body_checks check_client_access check_etrn_access check_helo_access check_recipient_access check_recipient_maps check_sender_access content_filter default_rbl_reply defer_if_permit header_checks invalid_hostname_reject_code maps_rbl_reject_code non_fqdn_reject_code permit_auth_destination permit_mx_backup permit_mx_backup_networks permit_mynetworks rbl_reply_maps reject_code reject_invalid_hostname reject_non_fqdn_hostname reject_non_fqdn_recipient reject_non_fqdn_sender reject_rbl reject_rbl_client reject_rhsbl_client reject_rhsbl_recipient reject_rhsbl_sender reject_sender_login_mismatch reject_unauth_destination reject_unauth_pipelining reject_unknown_client reject_unknown_hostname reject_unknown_recipient_domain reject_unknown_sender_domain relay_domains relay_domains_reject_code smtpd_client_restrictions smtpd_etrn_restrictions smtpd_expansion_filter smtpd_helo_required smtpd_helo_restrictions smtpd_recipient_restrictions smtpd_sender_login_maps smtpd_sender_restrictions unknown_client_reject_code unknown_hostname_reject_code warn_if_reject
Traffic Control, on the other-hand, is inherently designed to fight spam. The process of throttling unknown senders is so effective at removing spam, even before the email content is sent to your servers, that we can all have more time for the finer things in life.
This Postfix webpage gives a pretty thorough explanation and it's all good stuff.
http://www.postfix.org/uce.html
But with this many configuration parameters there's a lot of tweaking to do to get good spam protection.
body_checks check_client_access check_etrn_access check_helo_access check_recipient_access check_recipient_maps check_sender_access content_filter default_rbl_reply defer_if_permit header_checks invalid_hostname_reject_code maps_rbl_reject_code non_fqdn_reject_code permit_auth_destination permit_mx_backup permit_mx_backup_networks permit_mynetworks rbl_reply_maps reject_code reject_invalid_hostname reject_non_fqdn_hostname reject_non_fqdn_recipient reject_non_fqdn_sender reject_rbl reject_rbl_client reject_rhsbl_client reject_rhsbl_recipient reject_rhsbl_sender reject_sender_login_mismatch reject_unauth_destination reject_unauth_pipelining reject_unknown_client reject_unknown_hostname reject_unknown_recipient_domain reject_unknown_sender_domain relay_domains relay_domains_reject_code smtpd_client_restrictions smtpd_etrn_restrictions smtpd_expansion_filter smtpd_helo_required smtpd_helo_restrictions smtpd_recipient_restrictions smtpd_sender_login_maps smtpd_sender_restrictions unknown_client_reject_code unknown_hostname_reject_code warn_if_reject
Traffic Control, on the other-hand, is inherently designed to fight spam. The process of throttling unknown senders is so effective at removing spam, even before the email content is sent to your servers, that we can all have more time for the finer things in life.
Labels:
bad senders,
beer,
configuration,
email content,
postfix,
relax,
throttling,
traffic control,
unknown senders
Monday, July 7, 2008
How To Freely Download And Install Traffic Control 3.1
This video will show you how to download MailChannels Traffic Control from our website and install it on your server. It only takes a few minutes to get up and running with Traffic Control.
Installation Process
Installing Traffic Control is easy. Simply:
- Read the installation guide in the Traffic Control manual
- Download the tar ball
- Run install.sh as root
- Follow the instructions presented by the installer
- Modify your mail server configuration to accept Traffic Control as a proxy
- Start Traffic Control using the start-proxy.sh command
Labels:
demo,
download,
howto,
install,
quick start,
traffic control,
tutorial,
video,
youtube
Subscribe to:
Posts (Atom)