Hello Julio -

On Tuesday 20 March 2001 02:01, [EMAIL PROTECTED] wrote:
> Hi all,
>
> we need to decide which radius server will upgrade our AAA plattform. Our
> final choice is between Radiator and BSAC.
>
> A feature-table has been elaborated and checked during the last months. The
> last check-item is about performance in resolving radius-clients requests.
>
> So the same test was done in the same conditions for BSAC and Radiator:
>
> - U420R with 2 processors, 1GB memory (Radius Server)
> - U220R with 1 processor, 512MG memory (Radius client with radpwtst)
>
> A radpwtst request was executed with 250 iterations.
>
> The results are:
>
> - BSAC finished in 7 sec.
> - Radiator finished in 23 sec.
>
> During the last months we made tunning of Radiator on these points:
> - hardware
> - LDAP
> - MySQL
> - UDP
>
> but it seems like the perl language is the main problem to improve
> performance.
>
> We launch Radiator with "Trace -1" and monitoring it, we noticed that
> almost all the time the peak of requests per second is 30.
>
> so,
>
> Anybody can tell us how to improve performace with Radiator?
>
> Does exist the posibility of execute a like-compiled instance of Radiator?
>
> Do you have in mind to upgrade Radiator to a multithread-compiled release?
>

There are a number of issues to consider regarding Radiator performance, 
mostly to do with external factors like databases and so on.

It is interesting that in recent tests using identical hardware, we initially 
saw about the same 30 requests per second, also using MySQL. However, we 
found that there was enormous improvement to be had simply by tuning the 
database and improving the indexes. In this particular case we saw the number 
of requests jump from 30 per second to 80 per second with no other changes. 

I also have some comments about common misunderstandings regarding Perl. 

First, Perl *is* compiled, but it is compiled at run time, not in some 
preliminary step prior to execution. Therefore, Radiator takes a few seconds 
to start up while the code is compiled, but thereafter it is as fast (or 
faster for some operations) than a compiled language. Performance limitations 
in our experience with thousands of installations of Radiator has never been 
due to Perl.

Second, multithreading - this comes up from time to time, and yes it is 
something we are considering once the support for multithreading is certified 
as "ready for production". Note however that multithreading in and of itself 
is not a panacea, and we have had comments from users of other products that 
multithreading can also cause severe problems, like when a database becomes 
unavailable and all of the process slots are exhausted due to threads waiting 
for completion. This failure mode is particularily unpleasant, as it 
generally means that the box is locked up with no way to restart it short of 
a power cycle.

Now, in your situation, I think you should do the following:

1. download and install Radiator 2.18

2. use the new high-resolution timing feature to examine the actual 
exectution times of your LDAP and SQL queries. See section 6.10.2 in the 
Radiator 2.18 reference manual

3. use the new indexes and SQL queries for MySQL in Radiator 2.18

4. have your DBA verify what other indexes should be added to your database

5. make sure you use the -notrace option with "radpwtst -notrace ....."

6. you should consider running two instances of Radiator, one for 
authentication and the other for accounting

As other contributors to the list have noted, you should be able to get 
*much* better performance from your system than you are currently seeing.

regards

Hugh 

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to