Hi Dennis I looked at WSS4j as a foundation for providing WS-Security support for the UltraESB, <http://adroitlogic.org> and realized the fact that its not really optimized for use on an ESB; in addition to a few more issues I came across. Thus we developed a new library - which is functionally similar to WSS4J, which performs over 3 X times or better than WSS4J. However, currently it does not yet ship as a separate library - although we may decide to do that if there is user interest and demand.
Here is a comparison of it in use against WS-Security based on WSS4J/Rampart http://adroitlogic.org/samples-articles-and-tutorials/15-tutorials/48-esb-performance.html cheers asankha > Following up on some earlier discussions of Axis2/Rampart WS-Security > performance, devWorks has now published my latest article in the Java > Web Services series, comparing Axis2/Rampart with Metro WS-Security > performance: http://www.ibm.com/developerworks/java/library/j-jws11/ > The results are very bad for Axis2/Rampart, with Metro more than twice > as fast overall in the WS-Security tests. > > As mentioned in the article, some timing tests with > org.apache.rampart.TIME logging seemed to indicate that a lot of the > overhead is actually occurring outside the Rampart handler. I suspect > that Axis2 has fallen into the same performance pit as Axis in doing > conversions to and from different forms of the message. > > If anyone is interested in investigating further, the full source code > for the performance comparison is available as a download from the > article. > > - Dennis > -- Asankha C. Perera AdroitLogic, http://adroitlogic.org http://esbmagic.blogspot.com
