Performance issue with Freeradius (2.1.7) running Veriwave

Verma Anurag-VNF673 Anurag.Verma at motorolasolutions.com
Fri Dec 17 10:39:47 CET 2010


Hi,

I am running freeradius version 2.1.7. I am seeing some performance
issue when I ran Veriwave AAA test with 15 clients connecting at the
rate of 15 client/sec. The auth type is PEAP-MSCHAPv2 and using the
local database (i.e. not radius). It is using the file as a db store
which in our system is mapped to a ramdisk.

The test runs for 30 sec. The auth rate was 9 auth/sec.  The same test
when ran against Microsoft AAA server gives 25 auth/sec. 

 

With Freeradius, out of 450 attempted authentications, 209 was
successful and 241 was failed. For single client the authentication time
is around 110 ms.  Is this the expected number? From the mailing list,
it seems 150 msec is what has been observed. The RSA key generation on
the server is offloaded to the hardware. Without it the auth rate was
only 3 auth/sec. Initially, I had threading option turned off and then
later turned it on, but the numbers did not change much.

 

I have tried various suggestion put forward in the mailing list
including radius file access during authentication by moving file
section from authorize section to authenticate section etc., but not
much improvement.

 

I also see something similar query raised, but did not find any
satisfactory reply.

 

http://freeradius.1045715.n5.nabble.com/Performance-with-Freeradius-1-1-
4-td2760808.html

 

 

Any help on this will be appreciated.

 

Thanks,

Anurag

________________________________

From: Verma Anurag-VNF673 
Sent: Wednesday, December 15, 2010 11:37 AM
To: 'freeradius-devel at lists.freeradius.org'
Subject: building freeradius statically

 

Hi,

I am trying to build static version of freeradius by passing
--enable-static --enable-shared=no  to configure. However, I get an
error related to static link of dynamic object libltdl.so.  In the make
output I can see it is explicitly referring to this shared library. How
can I tell it to link with libltdl.a (which is already existing)
instead? 

 

Thanks,

Anurag

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20101217/98c74bd4/attachment.html>


More information about the Freeradius-Devel mailing list