<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hello shibboleth list,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We recently “shibbolized” our Peoplesoft Portal to use Shibboleth for authentication and we also use Shibboleth with Canvas and some other service providers for our authentication source.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Our Fall term started yesterday and our Shibboleth servers experienced some possible load issues, or possible F5 interactions, where when we hit around 300 logins per minute, we began to have the F5 detect a lack of response and start taking
Shibboleth nodes offline which interrupted active logins and began to affect our overall portal access along with access issues with other resources using Shibboleth.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I believe we’re running a pretty standard configuration on Solaris servers with good networking/performance (qty two Oracle T4 servers with Solaris 10).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are running v2.3.8 of shibboleth.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The servers and the networking stack did not show signs of any significant load so we’re wondering if there are some constraints in Shibboleth or tomcat that we have to adjust to handle more volume.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have mitigated the issue at this time by disabling an https health check on the F5 and adding more Shibboleth servers to the configuration (borrow/steal them) and our logins resumed pretty good response after about 2 hours of impacts
on our end-users.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any advice or tips would be recommended.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--jim<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jim Ennis<o:p></o:p></p>
<p class="MsoNormal">Director Systems and Operations<o:p></o:p></p>
<p class="MsoNormal">University of Central Florida<o:p></o:p></p>
<p class="MsoNormal">12716 Pegasus Drive<o:p></o:p></p>
<p class="MsoNormal">CSB 308<o:p></o:p></p>
<p class="MsoNormal">Orlando, FL 32816<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">E-mail: <a href="mailto:jim.ennis@ucf.edu"><span style="color:windowtext">jim.ennis@ucf.edu</span></a><o:p></o:p></p>
<p class="MsoNormal">Voice: 407-823-1701<o:p></o:p></p>
<p class="MsoNormal">Fax: 407-882-9017<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>