Freeradius-Users Digest, Vol 108, Issue 20

[Rui Ribeiro]

Hi,

First you´d better upgrade to 2.2.4; so many things have improved.
We are serving around 2500 wifi customers, and the whole process of
authentication takes less than 20 ms, and we do use a MySQL database.

I advise to avoid external perl routines as possible, and have a look at
unlang; are you sure you are also measuring correctly things? I used to use
a couple of scripts that had their own setup, and though I had 200 ms when
I was having 30ms in the past, until it dawned in me it was the time for
the perl environment and script to load and setup the environment to work.

Regards


------------------------------
>
> Message: 4
> Date: Fri, 04 Apr 2014 16:46:11 +0700
> From: Eugene Grosbein <fr at grosbein.net>
> To: freeradius-users at lists.freeradius.org
> Subject: DHCP module and external DHCP relay
> Message-ID: <533E7F63.5020109 at grosbein.net>
> Content-Type: text/plain; charset=us-ascii
>
> Hi!
>
> We use FreeRADIUS 2.2.0 as DHCP server with rlm_perl
> to connect to external database to run stored procedure there
> that returns IP/mask/DNS etc for option82-enabled requests.
>
> The database is pretty fast and serves hundreds of parallel requests
> in 1 second or less.
>
> FreeRADIUS receives all DHCP requests from external high loaded DHCP relay
> and threats them all as coming from single DHCP client.
>
> Our perl script does extensive logging through direct syslog connection
> and I see that there is great delay between the moment of DHCP request
> arrival
> as shown by tcpdump  and the moment when post_auth perl function is
> invoked by FreeRADIUS.
>
> This delay is about 6 seconds and some DHCP clients do not wait for so
> long.
>
> Is it possible to eliminate these delays? Here are lines from radiusd log:
>
> Request 14280134 has been waiting in the processing queue for 6 seconds.
>  Check that all databases are running properly!
> Discarding duplicate request from client dhcp port 67 - ID: 1381353109 due
> to unfinished request 14280311
>
> Again, our database processes most request in less than 1 second and very
> seldom in 2 seconds
> but mentioned problem is persistent.
>
> Eugene Grosbein
>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> End of Freeradius-Users Digest, Vol 108, Issue 20
> *************************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/mailman/private/freeradius-users/attachments/20140404/1b4eac98/attachment.html>