[38644] in Kerberos
Re: Perfornace bench marking
daemon@ATHENA.MIT.EDU (Charles Hedrick)
Tue Dec 10 15:18:24 2019
From: Charles Hedrick <hedrick@rutgers.edu>
To: Yegui Cai <caiyegui@gmail.com>
Date: Tue, 10 Dec 2019 20:18:08 +0000
Message-ID: <934FCAFA-3264-403D-97F3-976AD040E5F0@rutgers.edu>
In-Reply-To: <CAJYMFR7+-22xdqCRK0v_KGojmfORA-TtC_nfngCURwpVhRq9ag@mail.gmail.com>
Content-Language: en-US
Content-ID: <A8D3BCD535E8FE4198513EA44D721DA8@namprd14.prod.outlook.com>
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
How many client systems and users?
We have a few hundred machines with around 2000 users (not all active, of course) in a computer science dept. 3 KDCs running as VMs with 4 processors and 16 GB each. The processors are generally using < 10% of available CPU. The KDC itself is light-weight. You want to watch the LDAP server. Now and then it grows, and you’ll want to restart it. (The only reason we have 16 G is to accommodate that issue. It should normally work OK in 8 GB, and maybe less.) It’s possible tune the directory server, but we haven’t done so. We run with the default of logging all LDAP and KDC transactions. You could turn that off. I find that the logs are useful for debugging.
We use Kerberized NFS, so we’re using Kerberos more than if you just used it to login.
The ideal environment is a VM where the VM or stooge system can do consistent point in time snapshots. A VM snapshot is the most useful backup.
> On Nov 15, 2019, at 3:35 PM, Yegui Cai <caiyegui@gmail.com> wrote:
>
> Hi,
> Is there some performance bench marking done against KDC. For instance, if
> I want to deploy a KDC server and suppose some peak traffic volume, what
> kind of memory/cpu resource I should provision for the server?
>
> Thanks!
> Yegui
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
