Memory Usage

[Chad La Joie]

On Fri, Feb 3, 2012 at 13:33, Zmuda, Matthew R <Matthew.R.Zmuda at td.com> wrote:
> Yes two login context entries are added that are almost identical. See the attached file.
> One by SSOProfileHandler.performAuthentication, the other by AuthenticationEngine(AuthenticationEngine).startUserAuthentication both using HttpServletHelper.bindLoginContext
>
> This is in V2.3.3 of IDP.
>
> I also see 1 ReplyCache added.
>
> When user authenticates only the second LoginContextEntry is cleared. The first one added sticks around until it expires. Same with Reply Cache.

Well, the replay cache entry has already been discussed.  I'll look at
the login context entry.

> We may at some point have a very large amount of users simultaneously using our system. So I need to fine tune this to clear our as much data as we can without affecting the integrity of the security.

You may want to do some load testing.  There are IdP instances that do
many hundreds of thousands of authn's a day and at least a few that I
know of that do a couple million.  Not saying that your load isn't
higher, just saying that before you go to far trying to optimize
things you might want to see how the system performs out of the box.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered