Have anyone test the performance about FreeRADIUS+jRadius on authentication?

[Okis Chuang]

Thanks for Alan's quick and kindly reply!

Yes, I'm under this slow performance trouble now....
Actually I tried let it not going into jradius and completing my easy job
only in FreeRADIUS yesterday. And it did it well.
It can finish 10000 auth request in 13 sec.

However, our goal is more than that ... the brief situation is that user
will be redirected to our captive portal during pre-auth if they got IP
address, then doing UAM authentication by web portal to our policy manager
server(built in FreeRADIUS+JRadius). 
We'll do some policy based control with our WiFi gateway like CoA request.
Then would do subscribers' accounting processing(identify some attributes in
accounting packet then modify its value then send to backend acct server).

So supposed I stop using jradius, what kinds of module would you recommend
me to fulfill these jobs such as that? 
Or actually FreeRADIUS can satisfy it by itself? Can it send CoA request to
WiFi gateway after receiving some predefined attribute value with web portal
while it sending access request to FreeRADIUS? I plan to make it become a
policy manager.


Cheers,
Okis

-------------------------------------------------------
Chuang Okis wrote:
> Have anyone test the performance about FreeRADIUS+jRadius on
authentication?

  Not me.

> The test was just for authentication load test from gateway to radius 
> server. My jradius handler would just do some easy string splitng for 
> one VSA.

  Use Perl.  It's integrated into the server, and should be much faster.

  Or, use a regex.  See "man unlang".  Or, write a C module to do it.

> Does this be the most probable factor causing the slow processing? 
> Even through I doubt it...

  Yes.  It's jradius.

> Then I did some interesting test later... 
> I left my handler empty but still let traffic get into jradius handler 
> through rlm_jradius by TCP socket.
> The result has improved a bit even though not at our level of acceptance..

> Its TPS (Transaction Per Seconds) improved from 30 to 300 approximately. 

  300 is still MUCH slower than 10,000.

> Hence, I'm guessing the bottleneck may be the process of rlm_jradius 
> communication.
> Does anyone get any help or recommendation??
> Or any other performance tuning tips I can do?

  Don't use jradius.  It's very slow.  Use pretty much anything else.

  Alan DeKok.


------------------------------