nginx imap proxy - timeouts

[Falko Koenig]

Hello,

we are using nginx as imap and pop3 proxy with a ldap database querying
the correct destination server for the user. LDAP Requests are realized
by a perl script for using different LDAP servers. We have noticed that
nginx has temporarily timeouts querying the LDAP server. The timeouts
occur before the query is sent to the LDAP server by the nginx. We get
the following error code:

2014/10/22 17:16:49 [error] 2073#0: *4391695 auth http server
127.0.0.1:8000 timed out (110: Connection timed out) while in http auth
state, client: XXX.XXX.XXX.XXX, server: 0.0.0.0:993, login: "USERNAME"
2014/10/22 17:16:52 [error] 2073#0: *4393196 auth http server
127.0.0.1:8000 timed out (110: Connection timed out) while in http auth
state, client: XXX.XXX.XXX.XXX, server: 0.0.0.0:995, login: "USERNAME"

Because of that it isn't possible that the answer of the LDAP server is
sent too slowly back to the nginx. The servers are in a cluster
configuration and one server processes 20.000 Connections. Are there any
required kernel parameters for solving the problem?

Regards,

Falko König
Platform Engineer
___________________________________

domainfactory GmbH
Oskar-Messter-Str. 33
85737 Ismaning
Germany

Telefon: +49 (0)89 / 55266-371
Telefax: +49 (0)89 / 55266-222

E-Mail: fkoenig at df.eu
Internet: www.df.eu

Registergericht: Amtsgericht München
HRB 150294, Geschäftsführer:
Peter Mueller, Tobias Mohr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20141023/17e6c077/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20141023/17e6c077/attachment.bin>