distributed maia setup tips?

Hello,

I'm setting up a distributed maia implementation and I'm
looking for 
tips and thoughts on how/what should be where.

Here's my architecture:

two mail relays running amavisd-maia
one mysql server
one web server

1.  What maia prerequesites actually need to be where?  I'm
assuming 
that all of the stuff in configtest.php needs to be on the
web front end 
and I'm planning to install all of the prereqs from
configtest.pl onto 
the mail relays.  Anything else I need to be aware of?

2.  My mysql server is a REALLY REALLY fast box.  (two
dual-core 2.4Ghz 
opterons, 64-bit RHEL 4 AS).   I'd like to run as many of
the 
cpu-intensive scripts there as possible.  Any thoughts on
what can run 
there vs what needs to run on the relays? 

Best,

Aaron Bennett

-- 
Aaron Bennett
Sr. Unix Systems Administrator
Clark University ITS
abennettclarku.edu     |     508.781.7315

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

On Tue, 2006-06-20 at 11:44 -0400, Aaron Bennett wrote:

> Here's my architecture:
> 
> two mail relays running amavisd-maia
> one mysql server
> one web server
> 

Given that your mysql box is where all the CPU power is,
what do you
gain (other than a lot of complexity) by splitting off the
web server?
You might be better off using that web server box as a third
relay, and
combining web and mysql on the big box. The relays are going
to have to
be running Spamassassin and any virus scanner you use (e.g.
ClamAV), and
this is going to be a lot more CPU-intensive than the web
stuff. 

Just my opinion, YMMV. I have four relays and one combined
web/MySQL box
(with high availability backup).

--Greg

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Greg Woods wrote:
>   
>> Given that your mysql box is where all the CPU
power is, what do you
>> gain (other than a lot of complexity) by splitting
off the web server?
>> You might be better off using that web server box
as a third relay, and
>> combining web and mysql on the big box. The relays
are going to have to
>> be running Spamassassin and any virus scanner you
use (e.g. ClamAV), and
>> this is going to be a lot more CPU-intensive than
the web stuff. 
>>
>>
>>     

Not too much, but the web server is an existing box that
handles student 
webmail so it's an easy thing to do.   I wouldn't  have
purchased a 
third-tier box for this setup, I just happen to have one
sitting around.

Using the MySQL server as a pure database let's me do a lot
of things to 
optimize that -- for example, setting the buffer pool to
2/3rds of 
available RAM -- which will let it scale better, plus I can
put it on a 
private address space and cut down the script kiddie
attacks.


-- 
Aaron Bennett
Sr. Unix Systems Administrator
Clark University ITS
abennettclarku.edu     |     508.781.7315

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aaron Bennett wrote:
> 2.  My mysql server is a REALLY REALLY fast box.  (two
dual-core 2.4Ghz 
> opterons, 64-bit RHEL 4 AS).   I'd like to run as many
of the 
> cpu-intensive scripts there as possible.  Any thoughts
on what can run 
> there vs what needs to run on the relays? 

The only other thing to think about is the maintenance
scripts.  They often use
a lot of CPU, and a lot of database updates.  I'm not sure
if it's good to have
them both on the same box or not... but then again, I don't
see where else you'd
want to run them from in this setup.

- --
David Morton
Maia Mailguard                        - http://www.maiamailguard
.com
Morton Software Design and Consulting - http://www.dgrmm.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFEmDyRUy30ODPkzl0RAkCaAJ9TNA18uixEz0T4UqcYsAFFb7aJRwCg
xbft
sYGR19xt6N+/nKSanLA2w50=
=rbhe
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

David Morton wrote:
>
>
> The only other thing to think about is the maintenance
scripts.  They often use
> a lot of CPU, and a lot of database updates.  I'm not
sure if it's good to have
> them both on the same box or not... but then again, I
don't see where else you'd
> want to run them from in this setup.
>   
let me put it a different way...

"What scripts CANNOT be run on the database
server"? Here's where my 
thinking is:

process-quarantine.pl --learn : I'd like to run on DB
load-sa-rules.pl probably should be on mail relays since
that's where 
rules_du_jour is
stats-snapshot.pl : unsure, but i can't think of any reason
it can't run 
on database
expire-quarantine-cache.pl : same
send-quarantine-reminders.pl : pretty non-intensive,
probably easiest to 
run on a mail relay since it need to inject back to
localhost instance
send-quarantine-digests.pl same

am I making sense?  process-quarantine is probably the
biggest pig.

-- 
Aaron Bennett
Sr. Unix Systems Administrator
Clark University ITS
abennettclarku.edu     |     508.781.7315

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aaron Bennett wrote:
> David Morton wrote:
>>
>>
>> The only other thing to think about is the
maintenance scripts.  They
>> often use
>> a lot of CPU, and a lot of database updates.  I'm
not sure if it's
>> good to have
>> them both on the same box or not... but then again,
I don't see where
>> else you'd
>> want to run them from in this setup.
>>   
> let me put it a different way...
> 
> "What scripts CANNOT be run on the database
server"? Here's where my
> thinking is:
> 
> process-quarantine.pl --learn : I'd like to run on DB
yes

> load-sa-rules.pl probably should be on mail relays
since that's where
> rules_du_jour is
yes, though it only needs to be run on one; be sure that
both relays have the
same rules!

> stats-snapshot.pl : unsure, but i can't think of any
reason it can't run
> on database
yes

> expire-quarantine-cache.pl : same
yes

> send-quarantine-reminders.pl : pretty non-intensive,
probably easiest to
> run on a mail relay since it need to inject back to
localhost instance
> send-quarantine-digests.pl same

yeah, that sounds right.

> am I making sense?  process-quarantine is probably the
biggest pig.

quite right.



- --
David Morton
Maia Mailguard                        - http://www.maiamailguard
.com
Morton Software Design and Consulting - http://www.dgrmm.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFEmFyaUy30ODPkzl0RAix9AJ9XP2z/mE28PwntJ2OB1F9emj2A+gCg
o+p3
n/inRPUq/6iXbPKiBQBpBQo=
=bXpN
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users