2020-10-08 12:16:56 +02:00
|
|
|
=========================================================
|
|
|
|
Synapse |support| |development| |license| |pypi| |python|
|
|
|
|
=========================================================
|
2020-05-01 13:42:35 +02:00
|
|
|
|
2015-03-14 01:22:41 +01:00
|
|
|
.. contents::
|
|
|
|
|
2014-09-02 11:04:41 +02:00
|
|
|
Introduction
|
|
|
|
============
|
2014-08-12 20:36:36 +02:00
|
|
|
|
2014-08-13 04:01:27 +02:00
|
|
|
Matrix is an ambitious new ecosystem for open federated Instant Messaging and
|
2014-09-02 22:14:32 +02:00
|
|
|
VoIP. The basics you need to know to get up and running are:
|
2014-08-13 16:23:06 +02:00
|
|
|
|
2014-11-17 20:42:27 +01:00
|
|
|
- Everything in Matrix happens in a room. Rooms are distributed and do not
|
2015-08-20 16:20:07 +02:00
|
|
|
exist on any single server. Rooms can be located using convenience aliases
|
2015-02-14 01:16:33 +01:00
|
|
|
like ``#matrix:matrix.org`` or ``#test:localhost:8448``.
|
2014-10-02 12:00:21 +02:00
|
|
|
|
|
|
|
- Matrix user IDs look like ``@matthew:matrix.org`` (although in the future
|
2016-12-02 11:33:50 +01:00
|
|
|
you will normally refer to yourself and others using a third party identifier
|
2016-07-27 20:20:46 +02:00
|
|
|
(3PID): email address, phone number, etc rather than manipulating Matrix user IDs)
|
2014-08-13 16:37:57 +02:00
|
|
|
|
|
|
|
The overall architecture is::
|
|
|
|
|
2014-09-02 18:43:43 +02:00
|
|
|
client <----> homeserver <=====================> homeserver <----> client
|
2014-09-04 02:51:01 +02:00
|
|
|
https://somewhere.org/_matrix https://elsewhere.net/_matrix
|
2014-08-13 16:23:06 +02:00
|
|
|
|
2014-11-17 20:42:27 +01:00
|
|
|
``#matrix:matrix.org`` is the official support room for Matrix, and can be
|
2017-03-18 17:16:12 +01:00
|
|
|
accessed by any client from https://matrix.org/docs/projects/try-matrix-now.html or
|
2016-12-02 12:00:23 +01:00
|
|
|
via IRC bridge at irc://irc.freenode.net/matrix.
|
2014-08-23 01:50:49 +02:00
|
|
|
|
2015-08-20 16:20:07 +02:00
|
|
|
Synapse is currently in rapid development, but as of version 0.5 we believe it
|
2014-11-17 20:42:27 +01:00
|
|
|
is sufficiently stable to be run as an internet-facing service for real usage!
|
2014-10-02 12:00:21 +02:00
|
|
|
|
2014-08-13 16:23:06 +02:00
|
|
|
About Matrix
|
|
|
|
============
|
2014-08-12 20:36:36 +02:00
|
|
|
|
2014-08-14 04:36:03 +02:00
|
|
|
Matrix specifies a set of pragmatic RESTful HTTP JSON APIs as an open standard,
|
|
|
|
which handle:
|
2014-08-12 20:36:36 +02:00
|
|
|
|
2014-10-02 12:00:21 +02:00
|
|
|
- Creating and managing fully distributed chat rooms with no
|
|
|
|
single points of control or failure
|
2014-11-17 20:42:27 +01:00
|
|
|
- Eventually-consistent cryptographically secure synchronisation of room
|
2014-10-02 12:00:21 +02:00
|
|
|
state across a global open network of federated servers and services
|
|
|
|
- Sending and receiving extensible messages in a room with (optional)
|
2020-07-29 16:35:44 +02:00
|
|
|
end-to-end encryption
|
2014-10-02 12:00:21 +02:00
|
|
|
- Inviting, joining, leaving, kicking, banning room members
|
|
|
|
- Managing user accounts (registration, login, logout)
|
|
|
|
- Using 3rd Party IDs (3PIDs) such as email addresses, phone numbers,
|
|
|
|
Facebook accounts to authenticate, identify and discover users on Matrix.
|
|
|
|
- Placing 1:1 VoIP and Video calls
|
2014-08-12 20:36:36 +02:00
|
|
|
|
|
|
|
These APIs are intended to be implemented on a wide range of servers, services
|
2014-10-02 12:00:21 +02:00
|
|
|
and clients, letting developers build messaging and VoIP functionality on top
|
|
|
|
of the entirely open Matrix ecosystem rather than using closed or proprietary
|
2014-08-13 04:01:27 +02:00
|
|
|
solutions. The hope is for Matrix to act as the building blocks for a new
|
|
|
|
generation of fully open and interoperable messaging and VoIP apps for the
|
|
|
|
internet.
|
2014-08-12 20:36:36 +02:00
|
|
|
|
|
|
|
Synapse is a reference "homeserver" implementation of Matrix from the core
|
2016-12-02 18:11:58 +01:00
|
|
|
development team at matrix.org, written in Python/Twisted. It is intended to
|
|
|
|
showcase the concept of Matrix and let folks see the spec in the context of a
|
|
|
|
codebase and let you run your own homeserver and generally help bootstrap the
|
|
|
|
ecosystem.
|
2014-08-12 20:36:36 +02:00
|
|
|
|
|
|
|
In Matrix, every user runs one or more Matrix clients, which connect through to
|
2016-05-29 11:31:56 +02:00
|
|
|
a Matrix homeserver. The homeserver stores all their personal chat history and
|
|
|
|
user account information - much as a mail client connects through to an
|
|
|
|
IMAP/SMTP server. Just like email, you can either run your own Matrix
|
|
|
|
homeserver and control and own your own communications and history or use one
|
|
|
|
hosted by someone else (e.g. matrix.org) - there is no single point of control
|
|
|
|
or mandatory service provider in Matrix, unlike WhatsApp, Facebook, Hangouts,
|
|
|
|
etc.
|
2014-08-12 20:36:36 +02:00
|
|
|
|
2015-04-29 01:00:24 +02:00
|
|
|
We'd like to invite you to join #matrix:matrix.org (via
|
2017-03-18 17:16:12 +01:00
|
|
|
https://matrix.org/docs/projects/try-matrix-now.html), run a homeserver, take a look
|
2016-12-02 18:11:58 +01:00
|
|
|
at the `Matrix spec <https://matrix.org/docs/spec>`_, and experiment with the
|
|
|
|
`APIs <https://matrix.org/docs/api>`_ and `Client SDKs
|
2018-07-10 21:14:22 +02:00
|
|
|
<https://matrix.org/docs/projects/try-matrix-now.html#client-sdks>`_.
|
2014-08-13 12:48:55 +02:00
|
|
|
|
2014-11-17 20:42:27 +01:00
|
|
|
Thanks for using Matrix!
|
|
|
|
|
2020-05-01 17:27:22 +02:00
|
|
|
Support
|
|
|
|
=======
|
|
|
|
|
|
|
|
For support installing or managing Synapse, please join |room|_ (from a matrix.org
|
|
|
|
account if necessary) and ask questions there. We do not use GitHub issues for
|
|
|
|
support requests, only for bug reports and feature requests.
|
|
|
|
|
|
|
|
.. |room| replace:: ``#synapse:matrix.org``
|
|
|
|
.. _room: https://matrix.to/#/#synapse:matrix.org
|
|
|
|
|
|
|
|
|
2015-04-29 01:00:24 +02:00
|
|
|
Synapse Installation
|
|
|
|
====================
|
|
|
|
|
2019-03-12 15:23:28 +01:00
|
|
|
.. _federation:
|
|
|
|
|
|
|
|
* For details on how to install synapse, see `<INSTALL.md>`_.
|
|
|
|
* For specific details on how to configure Synapse for federation see `docs/federate.md <docs/federate.md>`_
|
2014-08-12 16:10:52 +02:00
|
|
|
|
2015-12-02 00:05:03 +01:00
|
|
|
|
2016-12-02 12:18:31 +01:00
|
|
|
Connecting to Synapse from a client
|
|
|
|
===================================
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 12:18:31 +01:00
|
|
|
The easiest way to try out your new Synapse installation is by connecting to it
|
2019-02-12 11:53:28 +01:00
|
|
|
from a web client.
|
|
|
|
|
|
|
|
Unless you are running a test instance of Synapse on your local machine, in
|
|
|
|
general, you will need to enable TLS support before you can successfully
|
|
|
|
connect from a client: see `<INSTALL.md#tls-certificates>`_.
|
|
|
|
|
2020-07-29 16:35:44 +02:00
|
|
|
An easy way to get started is to login or register via Element at
|
|
|
|
https://app.element.io/#/login or https://app.element.io/#/register respectively.
|
2019-02-12 11:53:28 +01:00
|
|
|
You will need to change the server you are logging into from ``matrix.org``
|
2019-03-12 15:23:28 +01:00
|
|
|
and instead specify a Homeserver URL of ``https://<server_name>:8448``
|
|
|
|
(or just ``https://<server_name>`` if you are using a reverse proxy).
|
|
|
|
If you prefer to use another client, refer to our
|
2019-02-12 11:53:28 +01:00
|
|
|
`client breakdown <https://matrix.org/docs/projects/clients-matrix>`_.
|
2017-09-25 16:20:23 +02:00
|
|
|
|
2016-12-02 12:18:31 +01:00
|
|
|
If all goes well you should at least be able to log in, create a room, and
|
|
|
|
start sending messages.
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 12:18:56 +01:00
|
|
|
.. _`client-user-reg`:
|
|
|
|
|
2016-12-02 12:18:31 +01:00
|
|
|
Registering a new user from a client
|
|
|
|
------------------------------------
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 12:18:56 +01:00
|
|
|
By default, registration of new users via Matrix clients is disabled. To enable
|
|
|
|
it, specify ``enable_registration: true`` in ``homeserver.yaml``. (It is then
|
2019-09-17 13:55:29 +02:00
|
|
|
recommended to also set up CAPTCHA - see `<docs/CAPTCHA_SETUP.md>`_.)
|
2016-12-02 12:18:56 +01:00
|
|
|
|
|
|
|
Once ``enable_registration`` is set to ``true``, it is possible to register a
|
2020-07-29 16:35:44 +02:00
|
|
|
user via a Matrix client.
|
2016-12-02 12:18:56 +01:00
|
|
|
|
2019-03-04 16:59:43 +01:00
|
|
|
Your new user name will be formed partly from the ``server_name``, and partly
|
|
|
|
from a localpart you specify when you create the account. Your name will take
|
|
|
|
the form of::
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 18:11:58 +01:00
|
|
|
@localpart:my.domain.name
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 18:11:58 +01:00
|
|
|
(pronounced "at localpart on my dot domain dot name").
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-12-02 12:18:31 +01:00
|
|
|
As when logging in, you will need to specify a "Custom server". Specify your
|
|
|
|
desired ``localpart`` in the 'User name' box.
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2019-02-05 16:45:00 +01:00
|
|
|
ACME setup
|
2019-02-05 17:44:31 +01:00
|
|
|
==========
|
2019-02-05 16:45:00 +01:00
|
|
|
|
|
|
|
For details on having Synapse manage your federation TLS certificates
|
|
|
|
automatically, please see `<docs/ACME.md>`_.
|
|
|
|
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2016-08-27 01:20:13 +02:00
|
|
|
Security Note
|
|
|
|
=============
|
|
|
|
|
2016-12-02 12:00:23 +01:00
|
|
|
Matrix serves raw user generated data in some APIs - specifically the `content
|
2018-07-10 21:14:22 +02:00
|
|
|
repository endpoints <https://matrix.org/docs/spec/client_server/latest.html#get-matrix-media-r0-download-servername-mediaid>`_.
|
2016-12-02 12:00:23 +01:00
|
|
|
|
2016-08-27 01:20:13 +02:00
|
|
|
Whilst we have tried to mitigate against possible XSS attacks (e.g.
|
|
|
|
https://github.com/matrix-org/synapse/pull/1021) we recommend running
|
|
|
|
matrix homeservers on a dedicated domain name, to limit any malicious user generated
|
|
|
|
content served to web browsers a matrix API from being able to attack webapps hosted
|
|
|
|
on the same domain. This is particularly true of sharing a matrix webclient and
|
|
|
|
server on the same domain.
|
|
|
|
|
2018-11-20 16:57:54 +01:00
|
|
|
See https://github.com/vector-im/riot-web/issues/1977 and
|
2016-08-27 01:20:13 +02:00
|
|
|
https://developer.github.com/changes/2014-04-25-user-content-security for more details.
|
|
|
|
|
2014-08-12 16:10:52 +02:00
|
|
|
|
2015-04-29 01:00:24 +02:00
|
|
|
Upgrading an existing Synapse
|
|
|
|
=============================
|
2014-08-22 16:23:02 +02:00
|
|
|
|
2015-08-20 16:08:18 +02:00
|
|
|
The instructions for upgrading synapse are in `UPGRADE.rst`_.
|
|
|
|
Please check these instructions as upgrading may require extra steps for some
|
|
|
|
versions of synapse.
|
2014-12-24 17:56:20 +01:00
|
|
|
|
2015-08-20 16:08:18 +02:00
|
|
|
.. _UPGRADE.rst: UPGRADE.rst
|
2014-08-22 16:23:02 +02:00
|
|
|
|
2016-12-02 12:02:08 +01:00
|
|
|
.. _reverse-proxy:
|
|
|
|
|
|
|
|
Using a reverse proxy with Synapse
|
|
|
|
==================================
|
|
|
|
|
2017-09-25 16:20:23 +02:00
|
|
|
It is recommended to put a reverse proxy such as
|
2016-12-02 12:02:08 +01:00
|
|
|
`nginx <https://nginx.org/en/docs/http/ngx_http_proxy_module.html>`_,
|
2018-10-22 17:17:27 +02:00
|
|
|
`Apache <https://httpd.apache.org/docs/current/mod/mod_proxy_http.html>`_,
|
2020-07-08 11:09:16 +02:00
|
|
|
`Caddy <https://caddyserver.com/docs/quick-starts/reverse-proxy>`_ or
|
2018-07-10 21:14:22 +02:00
|
|
|
`HAProxy <https://www.haproxy.org/>`_ in front of Synapse. One advantage of
|
2016-12-02 12:02:08 +01:00
|
|
|
doing so is that it means that you can expose the default https port (443) to
|
|
|
|
Matrix clients without needing to run Synapse with root privileges.
|
|
|
|
|
2019-09-17 13:55:29 +02:00
|
|
|
For information on configuring one, see `<docs/reverse_proxy.md>`_.
|
2016-12-02 12:02:08 +01:00
|
|
|
|
2014-08-13 04:01:27 +02:00
|
|
|
Identity Servers
|
|
|
|
================
|
2014-08-12 16:10:52 +02:00
|
|
|
|
2016-12-02 11:42:10 +01:00
|
|
|
Identity servers have the job of mapping email addresses and other 3rd Party
|
|
|
|
IDs (3PIDs) to Matrix user IDs, as well as verifying the ownership of 3PIDs
|
|
|
|
before creating that mapping.
|
|
|
|
|
2016-12-02 18:11:58 +01:00
|
|
|
**They are not where accounts or credentials are stored - these live on home
|
|
|
|
servers. Identity Servers are just for mapping 3rd party IDs to matrix IDs.**
|
|
|
|
|
2016-12-02 11:42:10 +01:00
|
|
|
This process is very security-sensitive, as there is obvious risk of spam if it
|
|
|
|
is too easy to sign up for Matrix accounts or harvest 3PID data. In the longer
|
|
|
|
term, we hope to create a decentralised system to manage it (`matrix-doc #712
|
|
|
|
<https://github.com/matrix-org/matrix-doc/issues/712>`_), but in the meantime,
|
|
|
|
the role of managing trusted identity in the Matrix ecosystem is farmed out to
|
|
|
|
a cluster of known trusted ecosystem partners, who run 'Matrix Identity
|
|
|
|
Servers' such as `Sydent <https://github.com/matrix-org/sydent>`_, whose role
|
|
|
|
is purely to authenticate and track 3PID logins and publish end-user public
|
|
|
|
keys.
|
|
|
|
|
|
|
|
You can host your own copy of Sydent, but this will prevent you reaching other
|
|
|
|
users in the Matrix ecosystem via their email address, and prevent them finding
|
|
|
|
you. We therefore recommend that you use one of the centralised identity servers
|
|
|
|
at ``https://matrix.org`` or ``https://vector.im`` for now.
|
|
|
|
|
|
|
|
To reiterate: the Identity server will only be used if you choose to associate
|
|
|
|
an email address with your account, or send an invite to another user via their
|
|
|
|
email address.
|
2014-08-13 04:01:27 +02:00
|
|
|
|
2016-04-08 19:54:18 +02:00
|
|
|
|
2016-03-16 11:40:38 +01:00
|
|
|
Password reset
|
|
|
|
==============
|
|
|
|
|
2020-07-29 16:35:44 +02:00
|
|
|
Users can reset their password through their client. Alternatively, a server admin
|
|
|
|
can reset a users password using the `admin API <docs/admin_api/user_admin_api.rst#reset-password>`_
|
|
|
|
or by directly editing the database as shown below.
|
2016-03-16 11:40:38 +01:00
|
|
|
|
2016-12-02 12:36:12 +01:00
|
|
|
First calculate the hash of the new password::
|
2016-03-16 11:40:38 +01:00
|
|
|
|
2019-01-02 17:36:29 +01:00
|
|
|
$ ~/synapse/env/bin/hash_password
|
2016-12-02 11:33:50 +01:00
|
|
|
Password:
|
|
|
|
Confirm password:
|
2016-03-16 11:40:38 +01:00
|
|
|
$2a$12$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
|
|
|
2020-06-01 20:45:39 +02:00
|
|
|
Then update the ``users`` table in the database::
|
2016-03-16 11:40:38 +01:00
|
|
|
|
|
|
|
UPDATE users SET password_hash='$2a$12$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
|
|
|
|
WHERE name='@test:test.com';
|
2014-08-13 04:01:27 +02:00
|
|
|
|
2016-12-02 11:33:50 +01:00
|
|
|
|
|
|
|
Synapse Development
|
|
|
|
===================
|
|
|
|
|
2016-12-09 18:05:26 +01:00
|
|
|
Before setting up a development environment for synapse, make sure you have the
|
|
|
|
system dependencies (such as the python header files) installed - see
|
2019-02-12 11:53:28 +01:00
|
|
|
`Installing from source <INSTALL.md#installing-from-source>`_.
|
2016-12-09 18:05:26 +01:00
|
|
|
|
2016-12-02 11:33:50 +01:00
|
|
|
To check out a synapse for development, clone the git repo into a working
|
|
|
|
directory of your choice::
|
|
|
|
|
|
|
|
git clone https://github.com/matrix-org/synapse.git
|
|
|
|
cd synapse
|
|
|
|
|
|
|
|
Synapse has a number of external dependencies, that are easiest
|
|
|
|
to install using pip and a virtualenv::
|
|
|
|
|
2020-10-28 00:26:00 +01:00
|
|
|
python3 -m venv ./env
|
|
|
|
source ./env/bin/activate
|
|
|
|
pip install -e ".[all,test]"
|
2016-12-02 11:33:50 +01:00
|
|
|
|
|
|
|
This will run a process of downloading and installing all the needed
|
2020-11-13 13:07:09 +01:00
|
|
|
dependencies into a virtual env. If any dependencies fail to install,
|
|
|
|
try installing the failing modules individually::
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2020-11-13 13:07:09 +01:00
|
|
|
pip install -e "module-name"
|
|
|
|
|
|
|
|
Once this is done, you may wish to run Synapse's unit tests to
|
|
|
|
check that everything is installed correctly::
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2018-12-21 15:37:26 +01:00
|
|
|
python -m twisted.trial tests
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2020-11-13 13:07:09 +01:00
|
|
|
This should end with a 'PASSED' result (note that exact numbers will
|
|
|
|
differ)::
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2020-11-13 13:07:09 +01:00
|
|
|
Ran 1337 tests in 716.064s
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2020-11-13 13:07:09 +01:00
|
|
|
PASSED (skips=15, successes=1322)
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2017-11-14 22:09:50 +01:00
|
|
|
Running the Integration Tests
|
|
|
|
=============================
|
|
|
|
|
|
|
|
Synapse is accompanied by `SyTest <https://github.com/matrix-org/sytest>`_,
|
|
|
|
a Matrix homeserver integration testing suite, which uses HTTP requests to
|
|
|
|
access the API as a Matrix client would. It is able to run Synapse directly from
|
|
|
|
the source tree, so installation of the server is not required.
|
|
|
|
|
|
|
|
Testing with SyTest is recommended for verifying that changes related to the
|
|
|
|
Client-Server API are functioning correctly. See the `installation instructions
|
|
|
|
<https://github.com/matrix-org/sytest#installing>`_ for details.
|
2016-12-02 11:33:50 +01:00
|
|
|
|
2019-03-12 15:23:28 +01:00
|
|
|
Troubleshooting
|
|
|
|
===============
|
|
|
|
|
2020-06-01 20:45:39 +02:00
|
|
|
Need help? Join our community support room on Matrix:
|
|
|
|
`#synapse:matrix.org <https://matrix.to/#/#synapse:matrix.org>`_
|
|
|
|
|
2019-03-12 15:23:28 +01:00
|
|
|
Running out of File Handles
|
|
|
|
---------------------------
|
|
|
|
|
|
|
|
If synapse runs out of file handles, it typically fails badly - live-locking
|
|
|
|
at 100% CPU, and/or failing to accept new TCP connections (blocking the
|
|
|
|
connecting client). Matrix currently can legitimately use a lot of file handles,
|
|
|
|
thanks to busy rooms like #matrix:matrix.org containing hundreds of participating
|
|
|
|
servers. The first time a server talks in a room it will try to connect
|
|
|
|
simultaneously to all participating servers, which could exhaust the available
|
|
|
|
file descriptors between DNS queries & HTTPS sockets, especially if DNS is slow
|
|
|
|
to respond. (We need to improve the routing algorithm used to be better than
|
|
|
|
full mesh, but as of March 2019 this hasn't happened yet).
|
|
|
|
|
|
|
|
If you hit this failure mode, we recommend increasing the maximum number of
|
|
|
|
open file handles to be at least 4096 (assuming a default of 1024 or 256).
|
|
|
|
This is typically done by editing ``/etc/security/limits.conf``
|
|
|
|
|
|
|
|
Separately, Synapse may leak file handles if inbound HTTP requests get stuck
|
|
|
|
during processing - e.g. blocked behind a lock or talking to a remote server etc.
|
|
|
|
This is best diagnosed by matching up the 'Received request' and 'Processed request'
|
|
|
|
log lines and looking for any 'Processed request' lines which take more than
|
|
|
|
a few seconds to execute. Please let us know at #synapse:matrix.org if
|
|
|
|
you see this failure mode so we can help debug it, however.
|
|
|
|
|
2018-12-08 11:33:42 +01:00
|
|
|
Help!! Synapse is slow and eats all my RAM/CPU!
|
2019-06-18 19:32:51 +02:00
|
|
|
-----------------------------------------------
|
2018-12-08 11:33:42 +01:00
|
|
|
|
|
|
|
First, ensure you are running the latest version of Synapse, using Python 3
|
|
|
|
with a PostgreSQL database.
|
2019-03-12 15:23:28 +01:00
|
|
|
|
|
|
|
Synapse's architecture is quite RAM hungry currently - we deliberately
|
|
|
|
cache a lot of recent room data and metadata in RAM in order to speed up
|
|
|
|
common requests. We'll improve this in the future, but for now the easiest
|
|
|
|
way to either reduce the RAM usage (at the risk of slowing things down)
|
|
|
|
is to set the almost-undocumented ``SYNAPSE_CACHE_FACTOR`` environment
|
|
|
|
variable. The default is 0.5, which can be decreased to reduce RAM usage
|
|
|
|
in memory constrained enviroments, or increased if performance starts to
|
|
|
|
degrade.
|
|
|
|
|
2018-12-08 11:33:42 +01:00
|
|
|
However, degraded performance due to a low cache factor, common on
|
|
|
|
machines with slow disks, often leads to explosions in memory use due
|
|
|
|
backlogged requests. In this case, reducing the cache factor will make
|
|
|
|
things worse. Instead, try increasing it drastically. 2.0 is a good
|
|
|
|
starting value.
|
|
|
|
|
2019-03-12 15:23:28 +01:00
|
|
|
Using `libjemalloc <http://jemalloc.net/>`_ can also yield a significant
|
2018-12-08 11:33:42 +01:00
|
|
|
improvement in overall memory use, and especially in terms of giving back
|
|
|
|
RAM to the OS. To use it, the library must simply be put in the
|
|
|
|
LD_PRELOAD environment variable when launching Synapse. On Debian, this
|
|
|
|
can be done by installing the ``libjemalloc1`` package and adding this
|
|
|
|
line to ``/etc/default/matrix-synapse``::
|
2019-03-12 15:23:28 +01:00
|
|
|
|
|
|
|
LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libjemalloc.so.1
|
|
|
|
|
|
|
|
This can make a significant difference on Python 2.7 - it's unclear how
|
|
|
|
much of an improvement it provides on Python 3.x.
|
2018-12-08 11:33:42 +01:00
|
|
|
|
|
|
|
If you're encountering high CPU use by the Synapse process itself, you
|
|
|
|
may be affected by a bug with presence tracking that leads to a
|
|
|
|
massive excess of outgoing federation requests (see `discussion
|
|
|
|
<https://github.com/matrix-org/synapse/issues/3971>`_). If metrics
|
|
|
|
indicate that your server is also issuing far more outgoing federation
|
|
|
|
requests than can be accounted for by your users' activity, this is a
|
|
|
|
likely cause. The misbehavior can be worked around by setting
|
|
|
|
``use_presence: false`` in the Synapse config file.
|
2019-09-12 22:13:31 +02:00
|
|
|
|
|
|
|
People can't accept room invitations from me
|
|
|
|
--------------------------------------------
|
|
|
|
|
|
|
|
The typical failure mode here is that you send an invitation to someone
|
|
|
|
to join a room or direct chat, but when they go to accept it, they get an
|
|
|
|
error (typically along the lines of "Invalid signature"). They might see
|
|
|
|
something like the following in their logs::
|
|
|
|
|
|
|
|
2019-09-11 19:32:04,271 - synapse.federation.transport.server - 288 - WARNING - GET-11752 - authenticate_request failed: 401: Invalid signature for server <server> with key ed25519:a_EqML: Unable to verify signature for <server>
|
|
|
|
|
|
|
|
This is normally caused by a misconfiguration in your reverse-proxy. See
|
2019-12-22 23:16:56 +01:00
|
|
|
`<docs/reverse_proxy.md>`_ and double-check that your settings are correct.
|
2020-10-08 12:16:56 +02:00
|
|
|
|
|
|
|
.. |support| image:: https://img.shields.io/matrix/synapse:matrix.org?label=support&logo=matrix
|
|
|
|
:alt: (get support on #synapse:matrix.org)
|
|
|
|
:target: https://matrix.to/#/#synapse:matrix.org
|
|
|
|
|
|
|
|
.. |development| image:: https://img.shields.io/matrix/synapse-dev:matrix.org?label=development&logo=matrix
|
|
|
|
:alt: (discuss development on #synapse-dev:matrix.org)
|
|
|
|
:target: https://matrix.to/#/#synapse-dev:matrix.org
|
|
|
|
|
|
|
|
.. |license| image:: https://img.shields.io/github/license/matrix-org/synapse
|
|
|
|
:alt: (check license in LICENSE file)
|
|
|
|
:target: LICENSE
|
|
|
|
|
|
|
|
.. |pypi| image:: https://img.shields.io/pypi/v/matrix-synapse
|
|
|
|
:alt: (latest version released on PyPi)
|
|
|
|
:target: https://pypi.org/project/matrix-synapse
|
|
|
|
|
|
|
|
.. |python| image:: https://img.shields.io/pypi/pyversions/matrix-synapse
|
|
|
|
:alt: (supported python versions)
|
|
|
|
:target: https://pypi.org/project/matrix-synapse
|