Re: Radius testing.

2011-11-18 Thread Alan Buxey
Hi,

> Anybody knows a tool to test radius performance? 

radperf or radtest/radclient with scripting . you might use
JRADIUSSimulator with scripting too. personally, radperf
does what I need.


you can check doc/performance-testing in the source distribution too


theres also doc/tuning_guide to help tweak performance.feedback/input
welcome


alan

PS theres a README file for instructions for radperf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius testing.

2011-11-17 Thread Alan DeKok
Francois Gaudreault wrote:
> The only things I find frustrating with radperf is the fact that it
> doesn't support EAP,

  EAP is hard.  eapol_test can do "-r N" to retry many times.

> and the way it agglomerate the request results (ie.
> <10s, <1s, etc), you can't tell the real response time.

  -D file should work.  Or maybe that's the current "git" version.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius testing.

2011-11-17 Thread Michael Holstein

> Anybody knows a tool to test radius performance? 
>
>   

Vasco's radius simulator. It runs in Wine under Linux just fine.

Regards,

Michael Holstein
Cleveland State University
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius testing.

2011-11-17 Thread Francois Gaudreault

Hi,


Any advice or ideas?
I personally used radperf to benchmark our radius server installs.  It's 
easy to configure, you only need to build a radius request (attributes) 
and tell radperf how much pps you want to send.


The only things I find frustrating with radperf is the fact that it 
doesn't support EAP, and the way it agglomerate the request results (ie. 
<10s, <1s, etc), you can't tell the real response time.


--
Francois Gaudreault, ing. jr
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius Testing Tool

2011-08-19 Thread Alan DeKok
Ben Brown wrote:
> I did initially look at using the radiusclient-ng library, but I found
> the dictionary parsing to be a bit too fragile. It would bomb out with
> very little provocation.

  Yes, it needs work.

>>   The "radsniff" program distributed with FreeRADIUS reads PCAP files.
>> It uses the FreeRADIUS library to read the dictionaries, and the library
>> can send/receive packets.
> 
> I wasn't aware of radsniff, I'll take a look at the code some time to
> see if I can integrate it. I quite like not needing any other libraries
> though, and it's such a small program really.

  The word I'm looking for is "robust".  :)

  Your program works, and is simple.  The code in FreeRADIUS works, and
is a lot more capable.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius Testing Tool

2011-08-19 Thread Ben Brown
On Fri, Aug 19, 2011 at 01:35:32PM +0100, Alan DeKok wrote:
>   OK... my main surprise is that you've re-written a RADIUS
> encoder/decoder, and a dictioanry file parser.  All of that code already
> exists...

I did initially look at using the radiusclient-ng library, but I found
the dictionary parsing to be a bit too fragile. It would bomb out with
very little provocation.

>   The "radsniff" program distributed with FreeRADIUS reads PCAP files.
> It uses the FreeRADIUS library to read the dictionaries, and the library
> can send/receive packets.

I wasn't aware of radsniff, I'll take a look at the code some time to
see if I can integrate it. I quite like not needing any other libraries
though, and it's such a small program really.

Ben

-- 
| Ben Brown Broadband Solutions for
| Infrastructure Engineer  Home & Business@
| Plusnet Plc  www.plus.net
| Registered Office: Internet House, 2 Tenter Street, Sheffield, S1 4BY
| Registered in England no: 3279013
+ --- Plusnet - ISPA Best Consumer ISP 2008 ---
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radius Testing Tool

2011-08-19 Thread Alan DeKok
Ben Brown wrote:
> I quickly found this to be very tedious and time consuming, so I started
> looking for a program that would read in the pcap file I'd made with
> tcpdump, fire the packets at the test server and compare the packet it
> got back with the response packets in the capture. After some googling I
> couldn't find anything, so I decided to write one.

  Sounds good.

> Now I am a developer, but an Engineer, so my C might not be the best,
> however I've found this very useful and thought other people might also
> find it useful. It's simple to use and the output is fairly easy to
> interpret.

  OK... my main surprise is that you've re-written a RADIUS
encoder/decoder, and a dictioanry file parser.  All of that code already
exists...

  The "radsniff" program distributed with FreeRADIUS reads PCAP files.
It uses the FreeRADIUS library to read the dictionaries, and the library
can send/receive packets.

  It may have been less work to glue some "send/receive" logic into
radsniff.

  Still, the tool looks useful.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html