If you manually installed PostgreSQL it should have the following done before Noodle connects to it
- permit password authentication via 127.0.0.1 in pg_hba.conf
- run init.sql
If you manually installed PostgreSQL it should have the following done before Noodle connects to it
Local
Hosted
postgresql.conf ships with quite modest defaults so be sure to august it for anything more than light use. We recommend for ~4k users;
There is a convenient config creator here.
When something unexpected happens Noodle will ask you what you were doing and email a stack trace to Vialect. Bug reports may also be sent to techsupport@vialect.com. Please use saleshelp@vialect.com for any other inquiries.
Please provide the following to help us reproduce and correct issues faster:
Leaving out information leads to Vialect spending less time creating solutions and more time attempting to reproduce issues and linking to this page.
The first encrypted request after starting Noodle can be 3 orders of magnitude slower than normal due to random entropy pool depletion. If your server suffers from this issue (most EC2 servers) you can verify by checking the pool size:
cd /proc/sys/kernel/random/ && cat poolsize entropy_avail
There are at least 3 solutions to a depleted pool:
Some hardware includes random generators (like the rdrand CPU flag):
grep -ic rdrand /proc/cpuinfo
You can enable its use with:
apt install rng-tools
systemctl start rng-tools.service
systemctl enable rng-tools.service
yum install rng-tools
systemctl start rngd.service
systemctl enable rngd.service
If you don't have a hardware generator or you don't trust it you can edit /opt/Noodle/multiserver to use:
-Djava.security.egd=file:///dev/urandom
Or edit java.security in $JRE8/lib/security or $JRE9/conf/security to use:
securerandom.source=file:/dev/urandom
For higher throughput and lower CPU usage than urandom haveged can be used but it can still block:
apt install haveged
systemctl start haveged.service
systemctl enable haveged.service
yum install haveged
systemctl start haveged.service
systemctl enable haveged.service
Answers to Frequently asked questions:
Ask us more.
openssl pkcs12 -export -in public.pem -inkey private.pem -out noodle.pfx -name domain.tld -CAfile chain.pem -caname root -chain
Noodle can import and export ical and supportts the non-standard TTY;
X-PUBLISHED-TTL:PT1H
REFRESH-INTERVAL;VALUE=DURATION:P1H