Shibboleth idp performance question

[Cantor, Scott]

On 8/20/13 4:48 PM, "Jim Ennis" <Jim.Ennis at ucf.edu> wrote:

>The servers and the networking stack did not show signs of any
>significant load so we¹re wondering if there are some constraints in
>Shibboleth or tomcat that we have to adjust to handle more volume.

Well, that depends on your web server load, but Shibboleth itself isn't
involved unless you have issues with authentication or attribute
resolution keeping up. In which case you'll have to deal with that, but
the IdP will bottleneck if you can't provide adequate performance on that
end.

I can tell you that we do 200,000 or so logins a day on two quad-core
Intel servers that are 2 years old and have little memory, and my boxes
are largely idle. But I don't think 300 per minute is likely to ever
happen here (we don't use it for webmail).

> 
>Any advice or tips would be recommended.

You have to know where the bottleneck actually is before addressing it.
It's not the IdP, that I can tell you for sure.

-- Scott