On Mon, 15 Jan 2007 22:41:55 +0200 Peter Nixon <listuser@peternixon.net> wrote:
On Mon 15 Jan 2007 22:16, Alan DeKok wrote:
I would be interested to see you run a benchmark to show that your algorithm for dealing with newest Auth request first is actually a performance gain in a high load environment. (I suspect that it will make very little difference compared with out caching system) If it does make a considerable difference, then of course we would consider adding a similar feature to FreeRADIUS. (ie. Please prove to us that what you have done is actually better!)
Dealing the the newest request first is *bad*. FreeRADIUS puts requests into a queue, and discards requests from the queue if it determines that they've timed out, or that the NAS has given up on them.
Priority (or time-based) queues stabilize networks. FILO queues do not.
Yeah. It seems to me that a FILO queue on a AAA server could lead to some very difficult to debug network behavior...
Your opinion seems to be reasonable. Although BSDRadius has timeout for auth packets I think that there is place for some experiments. FILO vs FIFO. Expiration time for auth packets is here to stay, of course. Valts.