I am wondering if anyone has an idea of the amount of hardware I would need to spec out to handle 50,000 EAP authentications per day. Would you recommend a secondary server for accounting? David
On 9 Jan 2014, at 17:59, David Peterson <davidp@wirelessconnections.net> wrote:
I am wondering if anyone has an idea of the amount of hardware I would need to spec out to handle 50,000 EAP authentications per day.
You've provided insufficient data to answer your question. Think about what you would need to answer this question if someone were asking it of you and try again. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Here is the core data: 200 NAS 50,000 WiMax users 1 authentication per day Protocol EAP-TTLS MySQL database (either on the same server or off, looking for recommendations on that). Accounting (looking for a recommendation on whether or not it should be hosted separately. Is that enough information or am I still missing something? -----Original Message----- From: freeradius-users-bounces+davidp=wirelessconnections.net@lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Arran Cudbard-Bell Sent: Thursday, January 9, 2014 1:21 PM To: FreeRadius users mailing list Subject: Re: Server Scaling On 9 Jan 2014, at 17:59, David Peterson <davidp@wirelessconnections.net> wrote:
I am wondering if anyone has an idea of the amount of hardware I would need to spec out to handle 50,000 EAP authentications per day.
You've provided insufficient data to answer your question. Think about what you would need to answer this question if someone were asking it of you and try again. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 9 Jan 2014, at 18:30, David Peterson <davidp@wirelessconnections.net> wrote:
Here is the core data: 200 NAS 50,000 WiMax users 1 authentication per day Protocol EAP-TTLS MySQL database (either on the same server or off, looking for recommendations on that). Accounting (looking for a recommendation on whether or not it should be hosted separately.
Is that enough information or am I still missing something?
For accounting data the bulk of the packets are usually interims, so you need to specify what the interim interval will be. Is there a particular reason every single one of your subscribers will re-authenticate at least once a day? What will be the maximum number of users connected to a single NAS (will it be 250, or will some NAS have more)? Are the NAS completely independent? Is there anything that could cause all subscribers to drop offline and come back at once, or will such incidents be limited to a single NAS? Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
OK so accounting is a very moving target. Noted. I am probably going to table that discussion for another time. Typically the NAS requires a session timeout in order to be able to disconnect an unauthorized user. I usually recommend once per day be the minimum. The NAS will have more or less subscribers depending on the population surrounding the NAS. The only thing that would cause all subscribers to come online at once is a FR server reboot or something severing the connection between the NAS network and FR. So I guess the answer would be yes, something could cause that to happen. I am really looking for some idea not a hard and fast recommendation. Something like "any quad core will do" or "you are going to need a lot of ram and processor power". David -----Original Message----- From: freeradius-users-bounces+davidp=wirelessconnections.net@lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of Arran Cudbard-Bell Sent: Thursday, January 9, 2014 2:08 PM To: FreeRadius users mailing list Subject: Re: Server Scaling On 9 Jan 2014, at 18:30, David Peterson <davidp@wirelessconnections.net> wrote:
Here is the core data: 200 NAS 50,000 WiMax users 1 authentication per day Protocol EAP-TTLS MySQL database (either on the same server or off, looking for recommendations on that). Accounting (looking for a recommendation on whether or not it should be hosted separately.
Is that enough information or am I still missing something?
For accounting data the bulk of the packets are usually interims, so you need to specify what the interim interval will be. Is there a particular reason every single one of your subscribers will re-authenticate at least once a day? What will be the maximum number of users connected to a single NAS (will it be 250, or will some NAS have more)? Are the NAS completely independent? Is there anything that could cause all subscribers to drop offline and come back at once, or will such incidents be limited to a single NAS? Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
A lot of ram and processing power and fast disks for the accounting data. And I would seriously advise you to use pgsql rather than mysql for that purpose but hey. I'd the authentication is light then some quad core xeon or such would probably fly... but if you've got EAP and secure methods for NAS communication then you might be looking at multi multicore CPUs ... but there's still much missing from your profile before a recommendation could be given. Alan .
That’s pretty much where I was going myself, thanks for the verification! David From: Alan Buxey [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: Thursday, January 9, 2014 2:55 PM To: FreeRadius users mailing list; David Peterson-WirelessConnections Subject: RE: Server Scaling A lot of ram and processing power and fast disks for the accounting data. And I would seriously advise you to use pgsql rather than mysql for that purpose but hey. I'd the authentication is light then some quad core xeon or such would probably fly... but if you've got EAP and secure methods for NAS communication then you might be looking at multi multicore CPUs ... but there's still much missing from your profile before a recommendation could be given. Alan .
participants (3)
-
Alan Buxey -
Arran Cudbard-Bell -
David Peterson