SoGo high memory consumption after 2027-07b

Author: c-store-cpCreated Sep 4, 2026Updated Sep 7, 2026
Labelsbug

Contribution guidelines

Checklist prior issue creation

  • I understand that failure to follow below instructions may cause this issue to be closed.
  • I understand that vague, incomplete or inaccurate information may cause this issue to be closed.
  • I understand that this form is intended solely for reporting software bugs and not for support-related inquiries.
  • I understand that all responses are voluntary and community-driven, and do not constitute commercial support.
  • I confirm that I have reviewed previous issues to ensure this matter has not already been addressed.
  • I confirm that my environment meets all prerequisite requirements as specified in the official documentation.

Description

Hello community, we experience an odd issue with mailcow dockerized after 2027-7b upgrade.

From time to time, SoGo takes up all available memory including swap. This leads to an unresponsive system, emails are rejected, and the system is not even accessible via shell.

The virtual machine has been assigned 24 Cores (AMD Epyc) / 24 GB of RAM, swap is a 4GB, storage runs on fast SSD.

I have researched this on the internet, and recommendation was to change the number of workers and also set a different memory limit for the workers. I tried various settings, nothing helped.

I can see that even though SxVMemLimit is set to 384, the Sogo processes reserve up to 5G of RAM
PID USER PR NI VIRT RES SHR S %CPU %MEM ZEIT+ BEFEHL 1209468 999 20 0 5130564 4,8g 208348 R 99,3 20,6 1:58.19 sogod

The mailcow-dockerized is only hosting 8 mailboxes currently.

I have set the following in docker-compose.override.yml :

sogo-mailcow: mem_limit: 512M mem_reservation: 512M

That resolves the issue at least for me.

Steps to reproduce:

  1. Install mailcow dockerized
  2. create mailboxes
  3. install 2027-7b update

Logs:

plain
sogo-mailcow-1  | Sep  4 08:42:57 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:43:00 b42e01153afe sogod [9]: [WARN] <0x0x558a61f70e60[WOWatchDogChild]> pid 50 has been hanging in the same request for 3 minutes
sogo-mailcow-1  | Sep  4 08:43:00 b42e01153afe sogod [50]: <0x0x558a61cdfba0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:43:03 b42e01153afe sogod [49]: <0x0x558a622a1480[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:43:15 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5e0c0[WOWatchDogChild]> pid 49 has been hanging in the same request for 4 minutes
sogo-mailcow-1  | Sep  4 08:43:25 b42e01153afe sogod [48]: aa.bb.cc.dd "REPORT /SOGo/dav/[email protected]/Calendar/personal/ HTTP/1.1" 207 9068/670 0.015 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:43:25 b42e01153afe sogod [48]: aa.bb.cc.dd "REPORT /SOGo/dav/kalender@XXXXX/Calendar/personal/ HTTP/1.1" 207 30716/670 0.035 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:43:26 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5ee00[WOWatchDogChild]> pid 51 has been hanging in the same request for 5 minutes
sogo-mailcow-1  | Sep  4 08:43:29 b42e01153afe sogod [48]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2578/0 0.007 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:43:42 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:43:45 b42e01153afe sogod [50]: <0x0x558a61cdfba0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:43:48 b42e01153afe sogod [49]: <0x0x558a622a1480[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:44:00 b42e01153afe sogod [9]: [WARN] <0x0x558a61f70e60[WOWatchDogChild]> pid 50 has been hanging in the same request for 4 minutes
sogo-mailcow-1  | Sep  4 08:44:15 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5e0c0[WOWatchDogChild]> pid 49 has been hanging in the same request for 5 minutes
sogo-mailcow-1  | Sep  4 08:44:24 b42e01153afe sogod [48]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2578/0 0.008 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:44:26 b42e01153afe sogod [48]: aa.bb.cc.dd "REPORT /SOGo/dav/[email protected]/Calendar/personal/ HTTP/1.1" 207 9068/670 0.009 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:44:26 b42e01153afe sogod [48]: aa.bb.cc.dd "REPORT /SOGo/dav/kalender@XXXXX/Calendar/personal/ HTTP/1.1" 207 30716/670 0.023 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:44:26 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5ee00[WOWatchDogChild]> pid 51 has been hanging in the same request for 6 minutes
sogo-mailcow-1  | Sep  4 08:44:27 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:44:30 b42e01153afe sogod [50]: <0x0x558a61cdfba0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:44:33 b42e01153afe sogod [49]: <0x0x558a622a1480[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:45:00 b42e01153afe sogod [9]: [WARN] <0x0x558a61f70e60[WOWatchDogChild]> pid 50 has been hanging in the same request for 5 minutes
sogo-mailcow-1  | Sep  4 08:45:01 b42e01153afe sogod [48]: <0x0x558a620108f0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:45:12 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:45:15 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5e0c0[WOWatchDogChild]> pid 49 has been hanging in the same request for 6 minutes
sogo-mailcow-1  | Sep  4 08:45:15 b42e01153afe sogod [50]: [ERROR] <0x0x558a61c20980[WOHttpTransaction]> client disconnected during delivery of response for <WORequest[0x0x558a622cc3e0]: method=POST uri=/SOGo/Microsoft-Server-ActiveSync?Cmd=Ping&User=XXXXX%40XXXXX&DeviceId=XXXX&DeviceType=Android app=SOGo rqKey=Microsoft-Server-ActiveSync rqPath=(null)> (len=13): the socket was shutdown
sogo-mailcow-1  | Sep  4 08:45:15 b42e01153afe sogod [50]: aa.bb.cc.dd.ee.ff, aa.bb.cc.dd.ee.ff "POST /SOGo/Microsoft-Server-ActiveSync?Cmd=Ping&User=XXXXX%40XXXXX&DeviceId=androidc1760133644&DeviceType=Android HTTP/1.1" 200 13/160 315.262 - - 2M - 13
sogo-mailcow-1  | Sep  4 08:45:18 b42e01153afe sogod [49]: <0x0x558a622a1480[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:45:23 b42e01153afe sogod [50]: [WARN] <0x0x7f3bf5f521e0[WOxElemBuilder]> could not locate builders: WOxExtElemBuilder,WOxExtElemBuilder
sogo-mailcow-1  | Sep  4 08:45:23 b42e01153afe sogod [50]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2578/0 0.045 - - 1M - 13
sogo-mailcow-1  | Sep  4 08:45:26 b42e01153afe sogod [50]: aa.bb.cc.dd "REPORT /SOGo/dav/[email protected]/Calendar/personal/ HTTP/1.1" 207 9068/670 0.014 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:45:26 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5ee00[WOWatchDogChild]> pid 51 has been hanging in the same request for 7 minutes
sogo-mailcow-1  | Sep  4 08:45:27 b42e01153afe sogod [50]: aa.bb.cc.dd "REPORT /SOGo/dav/kalender@XXXXX/Calendar/personal/ HTTP/1.1" 207 30716/670 0.032 - - 192K - 13
sogo-mailcow-1  | Sep  4 08:45:46 b42e01153afe sogod [48]: <0x0x558a620108f0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:45:57 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:46:01 b42e01153afe sogod [9]: [WARN] <0x0x558a61f466e0[WOWatchDogChild]> pid 48 has been hanging in the same request for 1 minutes
sogo-mailcow-1  | Sep  4 08:46:04 b42e01153afe sogod [49]: <0x0x558a622a1480[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:46:06 b42e01153afe sogod [50]: <0x0x558a62398210[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:46:15 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5e0c0[WOWatchDogChild]> pid 49 has been hanging in the same request for 7 minutes
sogo-mailcow-1  | Sep  4 08:46:26 b42e01153afe sogod [9]: [WARN] <0x0x558a61f5ee00[WOWatchDogChild]> pid 51 has been hanging in the same request for 8 minutes
sogo-mailcow-1  | Sep  4 08:46:27 b42e01153afe sogod [45]: aa.bb.cc.dd "REPORT /SOGo/dav/[email protected]/Calendar/personal/ HTTP/1.1" 207 9068/670 0.015 - - 0 - 13
sogo-mailcow-1  | Sep  4 08:46:27 b42e01153afe sogod [45]: aa.bb.cc.dd "REPORT /SOGo/dav/kalender@XXXXX/Calendar/personal/ HTTP/1.1" 207 30716/670 0.049 - - 0 - 14
sogo-mailcow-1  | Sep  4 08:46:31 b42e01153afe sogod [48]: <0x0x558a620108f0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:46:39 b42e01153afe sogod [45]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2578/0 0.004 - - 0 - 14
sogo-mailcow-1  | Sep  4 08:46:42 b42e01153afe sogod [51]: <0x0x558a61d4f360[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:46:49 b42e01153afe sogod [49]: [ERROR] <0x0x558a622b8a50[WOHttpTransaction]> client disconnected during delivery of response for <WORequest[0x0x558a61b850e0]: method=POST uri=/SOGo/[email protected]&DeviceId=XXX&DeviceType=iPhone&Cmd=Ping app=SOGo rqKey=Microsoft-Server-ActiveSync rqPath=(null)> (len=13): the socket was shutdown
sogo-mailcow-1  | Sep  4 08:46:49 b42e01153afe sogod [49]: aa.bb.cc.dd, aa.bb.cc.dd "POST /SOGo/[email protected]&DeviceId=RC6IGGCFBH4HR5GO7VLISR16V8&DeviceType=iPhone&Cmd=Ping HTTP/1.1" 200 13/0 453.509 - - 48M - 12
sogo-mailcow-1  | Sep  4 08:46:51 b42e01153afe sogod [50]: <0x0x558a62398210[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:47:01 b42e01153afe sogod [9]: [WARN] <0x0x558a61f466e0[WOWatchDogChild]> pid 48 has been hanging in the same request for 2 minutes
sogo-mailcow-1  | Sep  4 08:47:02 b42e01153afe sogod [49]: <0x0x558a624d50c0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...
sogo-mailcow-1  | Sep  4 08:47:05 b42e01153afe sogod [9]: [WARN] <0x0x558a61f70e60[WOWatchDogChild]> pid 50 has been hanging in the same request for 1 minutes
sogo-mailcow-1  | Sep  4 08:47:15 b42e01153afe sogod [45]: mailcowdockerized-watchdog-mailcow-1.mailcowdockerized_mailcow-network "GET /SOGo.index/ HTTP/1.1" 200 2578/0 0.005 - - 0 - 14
sogo-mailcow-1  | Sep  4 08:47:16 b42e01153afe sogod [48]: <0x0x558a620108f0[SOGoActiveSyncDispatcher]> Sleeping 45 seconds while detecting changes for user [email protected] in Ping...

Which branch are you using?

master (stable)

Which architecture are you using?

x86_64

Operating System:

Debian Trixie

Server/VM specifications:

24 GB, 24 Cores (Amd Epyc 7402)

Is Apparmor, SELinux or similar active?

no

Virtualization technology:

VMWare esxi

Docker version:

29.7.2

docker-compose version or docker compose version:

5.51

mailcow version:

2026-7b

Reverse proxy:

Apache

Logs of git diff:

plain

Logs of iptables -L -vn:

plain
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  38M  117G MAILCOW    all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* mailcow */
  38M  117G DOCKER-USER  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  38M  117G DOCKER-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:12345
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:4190
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:995
    8   416 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:993
   39  2028 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:143
  120  7200 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.250         tcp dpt:110
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:587
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:465
 3097  178K ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.253         tcp dpt:25
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.5           tcp dpt:3306
71562 4292K ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.11          tcp dpt:443
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.11          tcp dpt:80
    0     0 ACCEPT     tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            172.22.1.249         tcp dpt:6379
    0     0 DROP       all  --  !docker0 docker0  0.0.0.0/0            0.0.0.0/0
    1    52 DROP       all  --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0

Chain DOCKER-BRIDGE (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0
 111K 6551K DOCKER     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0

Chain DOCKER-CT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  *      docker0  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED
  24M 5188M ACCEPT     all  --  *      br-mailcow  0.0.0.0/0            0.0.0.0/0            ctstate RELATED,ESTABLISHED

Chain DOCKER-FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination
  38M  117G DOCKER-CT  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  14M  112G DOCKER-INTERNAL  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  14M  112G DOCKER-BRIDGE  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  docker0 *       0.0.0.0/0            0.0.0.0/0
  14M  112G ACCEPT     all  --  br-mailcow *       0.0.0.0/0            0.0.0.0/0

Chain DOCKER-INTERNAL (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       tcp  --  !br-mailcow br-mailcow  0.0.0.0/0            0.0.0.0/0            /* mailcow isolation */

Logs of ip6tables -L -vn:

plain
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 MAILCOW    all  --  *      *       ::/0                 ::/0                 /* mailcow */
    0     0 DOCKER-USER  all  --  *      *       ::/0                 ::/0
    0     0 DOCKER-FORWARD  all  --  *      *       ::/0                 ::/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER (0 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER-BRIDGE (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER-CT (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER-FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER-CT  all  --  *      *       ::/0                 ::/0
    0     0 DOCKER-INTERNAL  all  --  *      *       ::/0                 ::/0
    0     0 DOCKER-BRIDGE  all  --  *      *       ::/0                 ::/0

Chain DOCKER-INTERNAL (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain DOCKER-USER (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain MAILCOW (1 references)
 pkts bytes target     prot opt in     out     source               destination

Logs of iptables -L -vn -t nat:

plain
Chain PREROUTING (policy ACCEPT 2026K packets, 159M bytes)
 pkts bytes target     prot opt in     out     source               destination
 112K 6584K DOCKER     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 2462 packets, 152K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DOCKER     all  --  *      *       0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT 114K packets, 6707K bytes)
 pkts bytes target     prot opt in     out     source               destination
1978K  150M MASQUERADE  all  --  *      !br-mailcow  172.22.1.0/24        0.0.0.0/0
    0     0 MASQUERADE  all  --  *      !docker0  172.17.0.0/16        0.0.0.0/0

Chain DOCKER (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:7654 to:172.22.1.249:6379
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80 to:172.22.1.11:80
71589 4294K DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443 to:172.22.1.11:443
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            127.0.0.1            tcp dpt:13306 to:172.22.1.5:3306
 3104  178K DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:25 to:172.22.1.253:25
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0            0.0.0.0/0            tcp dpt:465 to:172.22.1.253:465
    0     0 DNAT       tcp  --  !br-mailcow *       0.0.0.0/0

Source: mailcow/mailcow-dockerized