Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-15 Thread Gordon Messmer
Jonathan Barber wrote: Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for user account data (via libnss_ldap). nss_ldap on the cluster is configured to use SSL, and everything

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-09 Thread Jonathan Barber
On Wed, Aug 08, 2007 at 09:26:08AM +0200, Andrey Ivanov wrote: > Hi, > > > JB> Hello all, currently we have a FDS instance running on RHEL4 with a > JB> small number of entries (6,000), we also have a linux compute cluster of > JB> 100 nodes which uses LDAP for user account data (via libnss_ldap)

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-09 Thread Jonathan Barber
On Wed, Aug 08, 2007 at 10:38:58AM -0500, David Bogen wrote: > We use SSL connections (LDAPS) almost exclusively and have easily > handled over 7000 SSL connections per minute without extensive tuning of > FDS. That particular server is a RHEL4 box running an AMD Opteron with > 4GB of RAM. > > Ev

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread David Boreham
David Bogen wrote: Our experience has shown start_tls to be noticeably slower than straight ssl; slow enough that the difference is noticeable to people and not just to measurements. I would recommend going with straight SSL and not messing around with start_tls Interesting observation given th

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread David Bogen
We use SSL connections (LDAPS) almost exclusively and have easily handled over 7000 SSL connections per minute without extensive tuning of FDS. That particular server is a RHEL4 box running an AMD Opteron with 4GB of RAM. Even a crusty old PIII (1.2Ghz) running RHEL3 has handled over 1000 SSL con

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread Andrey Ivanov
Hi, JB> Hello all, currently we have a FDS instance running on RHEL4 with a JB> small number of entries (6,000), we also have a linux compute cluster of JB> 100 nodes which uses LDAP for user account data (via libnss_ldap). JB> nss_ldap on the cluster is configured to use SSL, and everything is

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread David Boreham
I can reproducably, impact on FDS performance by running: $ getent passwd | cut -d: -f 1 | while read i; do id $i; done Since you can reproduce the syndrome at will, and in a steady state, just run that command above and then go run 'pstack ' on the server machine. That'll dump the thread

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Satish Chetty
Jonathan Barber wrote: Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for user account data (via libnss_ldap). nss_ldap on the cluster is configured to use SSL, and everything

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Jonathan Barber
On Tue, Aug 07, 2007 at 12:32:54PM -0400, Rob Crittenden wrote: > Jonathan Barber wrote: > >Hello all, currently we have a FDS instance running on RHEL4 with a > >small number of entries (6,000), we also have a linux compute cluster of > >100 nodes which uses LDAP for user account data (via libnss_

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Richard Megginson
Jonathan Barber wrote: On Tue, Aug 07, 2007 at 10:26:46AM -0600, Richard Megginson wrote: Jonathan Barber wrote: Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for use

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Jonathan Barber
On Tue, Aug 07, 2007 at 10:26:46AM -0600, Richard Megginson wrote: > Jonathan Barber wrote: > >Hello all, currently we have a FDS instance running on RHEL4 with a > >small number of entries (6,000), we also have a linux compute cluster of > >100 nodes which uses LDAP for user account data (via libn

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Rob Crittenden
Jonathan Barber wrote: Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for user account data (via libnss_ldap). SNIP [0] http://directory.fedoraproject.org/wiki/Performance_T

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Jonathan Barber
On Tue, Aug 07, 2007 at 05:22:19PM +0100, Jonathan Barber wrote: > Hello all, currently we have a FDS instance running on RHEL4 with a > small number of entries (6,000), we also have a linux compute cluster of > 100 nodes which uses LDAP for user account data (via libnss_ldap). > > nss_ldap on the

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Richard Megginson
Jonathan Barber wrote: Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for user account data (via libnss_ldap). nss_ldap on the cluster is configured to use SSL, and everything

[Fedora-directory-users] FDS SSL performance tuning query

2007-08-07 Thread Jonathan Barber
Hello all, currently we have a FDS instance running on RHEL4 with a small number of entries (6,000), we also have a linux compute cluster of 100 nodes which uses LDAP for user account data (via libnss_ldap). nss_ldap on the cluster is configured to use SSL, and everything is fine most of the time.