interaction between Virtual server & Authorize section

[Fajar A. Nugraha]

On Mon, Oct 21, 2013 at 10:53 AM, Okis Chuang <okischuang at outlook.com>wrote:

> That is, even virtual server “A” only has few operation to check, while
> “B” has much more things need to check and unfortunately maybe it could
> have low performance DB backend, does B might occupy resource in whole
> Authorize section so that A also become more and more busier?
>
> **
>

Yes


>  **
>
> In fact, I got many times of Error msg “child is hung for request in
> component authorize module” in radius.log. I would not think the loading in
> our server was really much high enough for causing late response to
> simulated request from our NMS per **minute**. Our wifi auth request per
> day is among 2000~3000 in average.
>

only 2k per day? That's tiny. Something if seriously wrong with your db if
it can't handle that much requests.

IIRC one way to isolate problematic db is to use small num_sql_socks in
sql.conf (default is 5). If the db is slow, it should bomb out quickly with
"There are no DB handles to use" errors, but there should be only a small
count of FR threads interacting with that db so that processes not using it
(e.g. other virtual server) should still work just fine.

-- 
Fajar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20131021/633aa3e8/attachment.html>