Hi Rajan,
See http://www.ibm.com/developerworks/java/library/j-jws6/index.html
WS-Security overhead is very high, and you're best off limiting its use
for high-volume web services to cases where it's really needed. And it's
not just Axis2/Rampart that has this kind of overhead - the second next
article in my series will be out around the end of the year, comparing
Sun's Metro and WSIT WS-Security performance with Axis2 and Rampart.
Incidentally, I have a 2- or 3-day class on Web Services Security which
covers options and tradeoffs, with the goal of educating architects and
developers to understand how to configure and use both transport layer
security (TLS AKA SSL) and WS-Security for their service. This class
includes looks at performance issues. I haven't included the description
for this class on my web site yet (updating the site always seems to be
at the bottom of the stack...), but if anyone's interested contact me
directly for details.
- Dennis
--
Dennis M. Sosnoski
Java XML and Web Services
Axis2 Training and Consulting
http://www.sosnoski.com - http://www.sosnoski.co.nz
Seattle, WA +1-425-939-0576 - Wellington, NZ +64-4-298-6117
Rajan Gupta wrote:
Hi,
Is there any document about the performance benchmarks of Rampart
1.4? I am using Rampart 1.4 with axis2 version 1.4.1 with full body
signing and encryption. The performance degrades a lot when we enabled
WSSE in our web services. Below is what we are seeing in our initial
benchmarking:
TPS CPU Utilization
Without WSSE 7.1 75%
With WSSE 32 50%
The server with WSSE gives one-fourth the TPS with 50% more CPU
utilization.
I am trying to find if there is anyone else who has done similar
performance benchmarking of Rampart.
Thanks in advance,
Rajan
