CAS protocol and Hazelcast

[Niva Agmon]

Hello,

We are getting ready to integrate our Luminis portal and BannerXE with our v3.3.1 idp, using CAS protocol authentication.   We have two nodes load balanced by an F5 and are using shib-hazelcast-storage-service for clustering.

Our tests show that we can't accommodate more than 12 sessions a second, which is really slow compared with 80 a second for SAML authn.
We can see the cas clients are making multiple trips to the F5 and tried to change it to 0 persistence and round robin, but then it looks like hazelcast is not even in the picture at all.

Does anyone have any experience or any tips how to fine tune  this?

Thanks!


Niva Agmon
Temple University

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170726/5a2e3b1d/attachment.html>