On Jun 14, 2022, at 10:26 PM, Cecil Wei <cecilwei@gmail.com> wrote:
I have been working on a project that we need to support more than 10000 tenants. I tried to create multiple virtual servers and each listen to different ports and I found that I can only create up to 300 virtual servers due to the limitation of FD_SETSIZE. In this case I will need to have more than 300 servers running which doesn't seem to make much sense.
The normal process is to just create users as "user@realm.org". You can then use one server.
I also consider the option of creating multiple client sections to specify the source IP addresses and the corresponding virtual server. However, I don't seem to find a way to identify tenants if the incoming traffic is from the same proxy server.
The reason this is hard is because no one does this. It's a bad design, and will cause all kinds of problems in the future.
I am running out of options and hoping that you may share your experience or suggestions.
Just use realms. It's what people have done for 20+ years. Alan DeKok.