Hi Shawn, Thanks for the response...I should have included those details earlier.
OS = Ubuntu 18.04 Java = java version "1.8.0_191" ApacheDS = apacheds-2.0.0.AM25 This is an AWS T3.small which means it has 2 vCPUs and 4 GB of ram. We have an equivalent test machine which responds quickly; that one only has a handful of users in the directory. Your last comment is the part that I am interested in. I expect this probably can be solved via indexing. Is there a guide to creating indexes somewhere? Matthew -----Original Message----- From: Shawn McKinney <[email protected]> Sent: Thursday, 20 February 2020 9:28 pm To: [email protected] Subject: Re: Performance Tuning for Apache DS > On Feb 19, 2020, at 2:12 PM, Matthew Marinovich <[email protected]> > wrote: > > Hi folks, > > We’ve been using ApacheDS for a couple of years as an LDAP server. The > directory we have now contains around 8k users and we’re finding that the > authentication is getting pretty slow i.e. around 2-3 seconds at least. If > you watch the ApacheDS activity during an LDAP auth you see a spike in CPU to > 100% during this activity. > > I assume that we need to undertake some performance tuning to make this work > faster, but I’m not sure where to start. Perhaps some indexes, caching or > memory settings? We are basically using the out of the box settings at the > moment. > > If anyone can point me in the right direction that would be great =) Hello Matthew, I’ll let others chime in with specific turning tips as I’m no expert in that regard. What I can offer are some tips. What statistics can you gather to help us help you? For example: Operating system X Java version Y ApacheDS Version Z Other helpful tidbits about the operating env. Is this a virtual machine, pure metal. What are the resources available to it? How much RAM, CPU? Also what are the runtime stats in terms of CPU and memory utilization? Finally, a specific log trace capturing the slow transaction rate would be helpful. That way we can pinpoint exactly which ldap operation is slowing you down. For example I would be very surprised if a bind was taking this long, on an otherwise healthy system. What wouldn’t surprise me (as much), is if an unindexed search on the user tree took this long. — Shawn --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
