Hello, Does FreeRadius has a server sizing guide to help people to choose the right hardware? I want to deploy two Linux servers(on VMware) in active/standby mode to serve maximum 5k PEAP authentication users. What would be the recommended server specs(such as CPU,RAM,Storage,IOPs) for this deployment? Thanks! --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 dxu@uoguelph.ca www.uoguelph.ca/ccs
Hi,
Does FreeRadius has a server sizing guide to help people to choose the right hardware? I want to deploy two Linux servers(on VMware) in active/standby mode to serve maximum 5k PEAP authentication users. What would be the recommended server specs(such as CPU,RAM,Storage,IOPs) for this deployment?
certificate size? concurrent authentication requests? backend authentication method? there is no direct sizing guide but there are benchmarking tools that you can use to get a measure of performance/capacity alan
I am not sure about the certificate size. But it will be using 2048bit key. The concurrent authentication request will be less than 10 per second. Backend authentication will use Active Directory. thanks. Dennis ----- Original Message ----- From: "A L M Buxey" <A.L.M.Buxey@lboro.ac.uk> To: dxu@uoguelph.ca, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 2, 2014 10:45:10 AM Subject: Re: FreeRadius Server Sizing recommendations Hi,
Does FreeRadius has a server sizing guide to help people to choose the right hardware? I want to deploy two Linux servers(on VMware) in active/standby mode to serve maximum 5k PEAP authentication users. What would be the recommended server specs(such as CPU,RAM,Storage,IOPs) for this deployment?
certificate size? concurrent authentication requests? backend authentication method? there is no direct sizing guide but there are benchmarking tools that you can use to get a measure of performance/capacity alan
Hi,
I am not sure about the certificate size. But it will be using 2048bit key. The concurrent authentication request will be less than 10 per second. Backend authentication will use Active Directory.
so the limit/bottleneck will be your communication to AD (and any local disk stuff you might do such as accounting/logging (suggest asynchronous accounting logging) - a basic server (dual core, 2 or 4 Gb of RAM and some 7.2 or 10k disks or SAN) should cope with that requirement - you can validate this by performing the benchmarks on a VM - its a VM after all, so just spin it up, allocation vCPU etc and run tests ramping up through vCPU allocation and given resources on Linux you'll also want to do some basic OS tweaking to remove other eg network/TCPIP stack related issues - usual TCP/ethernet tweaks alan
The bottleneck is ntlm_auth. Adjust the "winbind max domain connections" directive in your smb.conf to your needs.
A.L.M.Buxey@lboro.ac.uk hat am 2. September 2014 um 22:50 geschrieben:
Hi,
I am not sure about the certificate size. But it will be using 2048bit key. The concurrent authentication request will be less than 10 per second. Backend authentication will use Active Directory.
so the limit/bottleneck will be your communication to AD (and any local disk stuff you might do such as accounting/logging (suggest asynchronous accounting logging) - a basic server (dual core, 2 or 4 Gb of RAM and some 7.2 or 10k disks or SAN) should cope with that requirement - you can validate this by performing the benchmarks on a VM - its a VM after all, so just spin it up, allocation vCPU etc and run tests ramping up through vCPU allocation and given resources
on Linux you'll also want to do some basic OS tweaking to remove other eg network/TCPIP stack related issues - usual TCP/ethernet tweaks
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Patrick Machauer Rechenzentrum Duale Hochschule Baden-Württemberg Mannheim Baden-Wuerttemberg Cooperative State University Mannheim Rechenzentrum Coblitzallee 1-9 68163 Mannheim Tel.: +49 (0)621 4105 - 1278 Fax: +49 (0)621 4105 - 1278 E-Mail: machauer@dhbw-mannheim.de <mailto:machauer@dhbw-mannheim.de> Web: http://www.rz.dhbw-mannheim.de [Logo DHBW Mannheim]
A server with Xeon 2.4 GHz dual core CPU, 4-8GB RAM, 250GB 7.2k SATA hard drive, dual port gigabit NIC will be sufficient for your system. You can achieve 10 auths/sec easily with most default settings on radius and samba/winbind. Yu Wang -----Original Message----- From: freeradius-users-bounces+ywang10=fsu.edu@lists.freeradius.org [mailto:freeradius-users-bounces+ywang10=fsu.edu@lists.freeradius.org] On Behalf Of Dennis Xu Sent: Tuesday, September 02, 2014 2:57 PM To: A L M Buxey Cc: FreeRadius users mailing list Subject: Re: FreeRadius Server Sizing recommendations I am not sure about the certificate size. But it will be using 2048bit key. The concurrent authentication request will be less than 10 per second. Backend authentication will use Active Directory. thanks. Dennis ----- Original Message ----- From: "A L M Buxey" <A.L.M.Buxey@lboro.ac.uk> To: dxu@uoguelph.ca, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 2, 2014 10:45:10 AM Subject: Re: FreeRadius Server Sizing recommendations Hi,
Does FreeRadius has a server sizing guide to help people to choose the right hardware? I want to deploy two Linux servers(on VMware) in active/standby mode to serve maximum 5k PEAP authentication users. What would be the recommended server specs(such as CPU,RAM,Storage,IOPs) for this deployment?
certificate size? concurrent authentication requests? backend authentication method? there is no direct sizing guide but there are benchmarking tools that you can use to get a measure of performance/capacity alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dennis Xu wrote:
Does FreeRadius has a server sizing guide to help people to choose the right hardware?
No. You'd have to supply the full details of what you're doing.
I want to deploy two Linux servers(on VMware) in active/standby mode to serve maximum 5k PEAP authentication users.
If the users aren't authenticating, the load on the system is zero. So the question is, how many authentications per second do you expect?
What would be the recommended server specs(such as CPU,RAM,Storage,IOPs) for this deployment?
Read raddb/certs/README. There are instructions for testing systems to see how fast they are for EAP methods with SSL. But to be honest... an iPhone 3GS would handle the traffic just fine. And be 99% idle. i.e. it doesn't really matter what you provision. Modern systems are enormously fast. Alan DeKok.
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Dennis Xu -
Patrick Machauer -
Wang, Yu