ECP load testing

[Matthew Slowe]

On 9 Jul 2014, at 10:41, Peter Schober <peter.schober at univie.ac.at> wrote:

> Matthew,
> 
> * Matthew Slowe <M.Slowe at kent.ac.uk> [2014-07-09 08:09]:
>> Our Office365 IDPs serve about 120,000 ECP requests per day each
>> quite happily :)
> 
> Could you also share the number of (unique) subjects this number is
> for? I'm asking because I've heard stories about the IDP being
> hammered by ECP requests from people using Office365, even for smaller
> populations.

Sure! But it looks like I was rushing too much this morning!

We have three load balanced IDPs doing Office365 Authentications… looking at *one* of them, on what appears to be a "peak" day (2014-02-03) it serviced:

$ zcat /opt/idp/*/logs/idp-audit-2014-02-03.log.gz | cut -d\| -f 5 | sort | uniq -c
   6809 urn:mace:shibboleth:2.0:profiles:saml2:sso
 324370 urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp

= 331179 total

98% ECP
2%  Interactive

( the other two IDPs were about the same total and distribution between the two methods )

In terms of users, this single IDP saw 7772 unique users. The highest two "hitters" were two test accounts used by Nagios to check the ECP process is working correctly (which only accounted for 0.5% of the ECP hits).

I think it sees the level of activity that it does for a few reasons… we have a *lot* of users using "Smartphones" and routinely using ActiveSync/IMAP. Of these, I've observed that ActiveSync seems pretty well behaved (start up a session and hold it open for quite a while) but IMAP is a lot more "chatty" (given "push" IMAP [IDLE], I'm a bit surprised by this) so I suspect a lot of this "traffic" is IMAP clients (but I have no real evidence for this).

Hope that helps :-)
foo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4881 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140709/ec56177a/attachment-0001.bin