Max auths/sec. against local file = ~60. Max auths/sec. against AD = ~30.
I am hoping to make some optimizations to AD that will close that gap a bit ...we'll see. -Curtis ________________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [[email protected]] on behalf of Wang, Yu [[email protected]] Sent: Wednesday, October 08, 2014 11:41 AM To: [email protected] Subject: Re: [WIRELESS-LAN] RADIUS Monitoring We use radclient and Cacti as well but with snmp poll. Since Cacti's default pull interval is 5min, we get less accurate data/graphs than paid tool PRTG, which allows as short as 30 sec interval pull. The nice part of Cacti is you can stack several graphs into one graph to give you total auths/sec. BTW, what is the maximum auths/sec you have seen on your freeradius servers? Do you do EAP? Yu Wang ____________________________ Network Architect Information Technology Services The Florida State University 850-645-6810 [email protected] -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Curtis K. Larsen Sent: Wednesday, October 08, 2014 1:11 PM To: [email protected] Subject: Re: [WIRELESS-LAN] RADIUS Monitoring Very Helpful - Thank you. -Curtis ________________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [[email protected]] on behalf of Joshua Coleman [[email protected]] Sent: Wednesday, October 08, 2014 10:47 AM To: [email protected] Subject: Re: [WIRELESS-LAN] RADIUS Monitoring For gathering the data it's easier to use radclient http://wiki.freeradius.org/config/Status For Graphing/Alerts we use Cacti http://www.horoa.net/2013/09/installation-du-template-cacti-pour-freeradius2/?lang=eng But we were already using Cacti so YMMV. Joshua Coleman | Network Infrastructure Engineer University of Florida Department of Housing and Residence Education PO Box 112100 | Gainesville, FL 32611-2100 office 352.392.2171 x12053 | fax 352.392.6819 | [email protected] StrengthsQuest Top 5: Ideation, Strategic, Analytical, Adaptability, Intellection - Find out more - http://www.strengthsquest.com/content/141728/index.aspx Please consider the environment before printing this email. -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Curtis K. Larsen Sent: Wednesday, October 08, 2014 12:13 PM To: [email protected] Subject: [WIRELESS-LAN] RADIUS Monitoring I am trying to be proactive regarding scaling of RADIUS servers as we move to a new load-balanced environment. The idea is to know when we are getting close to a threshold and need to add another VM, allocate more CPU, RAM, etc. I've used a traffic generator to simulate authentications against our FreeRADIUS VM's and so I know the max. number of auths/sec. that a server can handle and I've seen that the server will start to reject clients when it can't handle the load. So I am thinking a dashboard that graphs the auths per second, and pie chart that shows successful vs. failed requests with some alerting would allow us to preempt load/growth issues. It seems this info wouldn't be too difficult to grab from syslog and graph on a web page somehow. I am just wondering if any of you have already done this or something like this that you could share before I re-invent the wheel. Let me know. Thanks, Curtis Larsen University of Utah ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
