Performance of Shibboleth IDP Ver 2.3.5

Cantor, Scott cantor.2 at osu.edu
Fri Jan 10 15:39:44 EST 2014


On 1/10/14, 3:36 PM, "kotesh201" <koteshwarv at gmail.com> wrote:
>however, the base CPU usage without signature/verification(no signature on
>request/response) itself is high.

Then you have a problem, but that's not the IdP. The signing is orders of
magnitude more work than the rest.

> 
>signed request/response - 9.4tps
>unsigned request - 10.4tps
>usigned request/response - 13.7tps

No chance.

>We are thinking the saml request xml parsers in shibboleth COTS might be
>consuming more CPU. If we want use any other XML parser, what are the
>configurations we need to consider.

Xerces is the only supported parser, and that isn't your problem.

-- Scott




More information about the users mailing list