Hello Yuri, We happily use CAS on a high volume web portal in France. We have more than 800,000 authentications on peak days and the traffic is planned to increase.
We use CAS over three Tomcat 6.0.18 / Sun JVM 1.6.0.13-32 bits / RHEL 4 / Dual Quad Core Xeon CPUs servers (less than 5 K euros per box). The three servers consume less than 10 percents of CPU (measured with vmstat) ; we want 3 nodes for high availability, not for the load. Tomcat session replication is not enabled, CAS doesn't need it. In front of these Tomcat server, we use mutualized Apache 2.2 + mod_proxy_balancer/mod_proxy_http web servers. In front of the Apache servers, we have one Big IP hardware load balancer. For CAS tickets distribution, we first used the JPATicketRegistry against an Active/StandBy Oracle DataGuard database. We were very happy with it but the DBAs told us that we were writing too much so we moved 6 weeks ago to a Distributed EHCache Ticket Registry (RMI synchronous replication for service tickets and RMI Asynchronous 500ms delay for authentication tickets, no RMI tuning). Both JPA and EH Cache RMI Ticket Registry have shown to be very reliable, simple and efficient. EH Cache RMI Ticket Registry burns a bit more CPU than the JPA Ticket Registry did but we gain to remove one layer in our architecture. I detailed our JPA and customization experience in http://www.mail-archive.com/[email protected]/msg01599.html . Another thing we like very much about CAS is that it is very easy to understand and to customize to your specific needs. You even have to be careful not to customize too much, maintenance of custome development is expensive as it is with every piece of software. . To conclude, we are very happy with CAS whatever the backend is a database or EHCache RMI and we are very confident in the increase of traffic the marketing plans for our web site. CAS will not be our bottleneck. Hope this helps, Cyrille (1) http://www.mail-archive.com/[email protected]/msg01599.html -- Cyrille Le Clerc [email protected] [email protected] http://blog.xebia.fr On Tue, Aug 11, 2009 at 12:17 AM, Yuri Negocio Negocio <[email protected]> wrote: > > Hi Guys, > > I'm evaluating Open Source SSO solutions for a website with large amounts of > access to an institution of the Brazilian government. > I am seriously considering the use of CAS as a solution, however, I need some > success stories of high availability to illustrate my infrastructure team. > > What is the biggest documented case of simultaneous access to CAS SSO > solution? > > What is the best way to achieve HA with CAS SSO? > > Regards, > > Yuri Feitosa Negócio > > Software Archite > > -- > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
