Need help

Valts Mazurs valts at bsdradius.org
Tue Jan 16 15:40:13 CET 2007



On Mon, 15 Jan 2007 22:41:55 +0200
Peter Nixon <listuser at peternixon.net> wrote:

> On Mon 15 Jan 2007 22:16, Alan DeKok wrote:
> > > I would be interested to see you run a benchmark to show that your
> > > algorithm for dealing with newest Auth request first is actually a
> > > performance gain in a high load environment. (I suspect that it will
> > > make very little difference compared with out caching system) If it does
> > > make a considerable difference, then of course we would consider adding
> > > a similar feature to FreeRADIUS. (ie. Please prove to us that what you
> > > have done is actually better!)
> >
> >   Dealing the the newest request first is *bad*.  FreeRADIUS puts
> > requests into a queue, and discards requests from the queue if it
> > determines that they've timed out, or that the NAS has given up on them.
> >
> >   Priority (or time-based) queues stabilize networks.  FILO queues do not.
> 
> Yeah. It seems to me that a FILO queue on a AAA server could lead to some 
> very difficult to debug network behavior...
> 

Your opinion seems to be reasonable. Although BSDRadius has timeout for
auth packets I think that there is place for some experiments. FILO vs
FIFO. Expiration time for auth packets is here to stay, of course.

Valts.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20070116/b466588f/attachment.pgp>


More information about the Freeradius-Devel mailing list