We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Big day: ns0.ovh.net POP3/IMAP4/SMTP + SSL update


oles@ovh.net
02-19-2010, 03:36 PM
Hello,

Last week, we switched infrastructure emails at POP3/IMAP4 and SMTP RELAY + SSL. We had some problems with SSL certificates and this took us 2-3 days to fix. We wanted to use that work everywhere and some of the configuration that you can save. But such certificate has not been understood by the old email software like Eudora or PHP scripts. We have simplified, streamlined and simplified further.

The result:

We note no more bugs here Friday 19 at 17:21.

Just follow the pattern described herei:
http://travaux.ovh.com/?do=details&id=3876

And more:

- in the SSL
-------------
WEBMAIL: http://webmail.ovh.net
POP3: ns0.ovh.net:110
IMAP4: ns0.ovh.net:143
SMTP: ns0.ovh.net:587 (il faut activer SMTP AUTH dans le SMTP
with the login/password of the POP3/IMAP4 account
This avoids errors:
553 sorry, that domain isn't allowed to be relayed thru this MTA)


- with SSL
-------------
WEBMAIL: https://ssl0.ovh.net
POP3: ssl0.ovh.net:995
IMAP4: ssl0.ovh.net:993
SMTP: ssl0.ovh.net:465 (il faut activer SMTP AUTH dans le SMTP
with the login/password of the POP3/IMAP4 account
This avoids errors:
553 sorry, that domain isn't allowed to be relayed thru this MTA)

If despite all this you still have problems, please send me an email with:

- Subject: "Email: problem"
- Your email account (with @)
- The screenshot with the error attached in the email

With this, we can begin to seek the sun in winter

Thanks !

All the best,
Octave

oles@ovh.net
02-12-2010, 04:58 PM
Good evening,

OK. This migration was harder than expected. First all IMAP clients have taken back all files and email servers. In short, you've taken all the emails you had at OVH, everyone at the same time and all data storage.

We've had more than 1 million simultaneous connections and email servers have released 2Gbps for 4 hours continuously! This killed the load balancing system. But as it's planned to be changed just after the migration, we made the most from this disaster to do all the downtime together and finish everything at high speed. In addition there was a bug in the kernel version of Linux, so we've updated all of our servers for email reception to the new kernel. Furthermore, the overload due to "POP before SMTP". How many things planned but since you are several million using our email services, a small planned overload turned into a disaster. SSL Certificates have also been corrected. The webmail/pop3/imap authentication works perfectly now. The new loadbalancing card handles the connections perfectly now too. We still need to reconfigure "pop before smtp" to a "light" version. It's in process. It should work in 1 hour. Some customers do not see all folders in IMAP. It corrects itself in 5 minutes. Then we still have to check some logs of some bizarre connections.

In contrast, the webmail is ultra fast. The IMAP / POP is the speed bomb. And importantly, the POP/IMAP check on the iPhone is very fast. In addition, you receive a very fast email but including the spam ... In short, OVH finally offers a fast email service. So at this level the goal was reached. Method: needs to be improved ...

After several days of "small" debugging with logs and your feedback, we'll start to update the SMTP servers for receiving emails with all the antispam things that we need.

Sorry for that dark day.

Regards
Octave

oles@ovh.net
02-11-2010, 10:26 PM
Hello,

We received a lot of emails of congratulations on the
update of the webmail. The new version of webmail, more
functionality, stability and especially the speed of
execution are some of the reasons stated. Thank you!
We have also received emails insults for changing things. Sorry!

After webmail, we will update the POP3 server (110)
as well as IMAP4 (143) with their SSL variants (995 and 993).
Also we will update the RELAY SMTP servers that you
can use to send emails online, also known as server ns0.ovh.net.
The update applies to port 25 and 5025 but more important
2 new ports will be started for the RELAY SMTP: port 587 without SSL
and 465 with SSL. Basically, the port 5025 is not
standard while the 587/465 are compatible with the RFC.
Eventually (say 1 year) we'll try to move all customers
25/5025 to 587/465. Without any hurry. We've got time.

Following this update, it may be that your IMAP client
shows some emails duplicated. It is likely, but not certain.
It is the only negative point that can happen during this
process.

If you have any malfunction, send me an email
to oles@ovh.net with the technical info. Estimated end of
work: tomorrow before noon. There are some servers to update ...

If this update is a success, early next week we change the
load balancing system for emails. This will accelerate further
exchanges and consultations of your emails.

Here we go ...

Regards,
Octave