Unix domain socket support for authentication and accounting?
Alan Buxey
alan.buxey at gmail.com
Mon May 2 20:31:34 UTC 2022
For packets less than 1024bytes theres very little difference. The 'talking
to radius' part is usually not a latency bottleneck, its the SQL , the
LDAP etc.
alan
On Mon, 2 May 2022, 15:09 William Tang, <galaxyking0419 at gmail.com> wrote:
> > I dont' believe so. And my numbers are as good as yours.
> > There is no reason to believe that's true.
> Unix domain sockets can achieve 66% latency reduction and 7x throughput,
> https://stackoverflow.com/a/29436429.
>
> > I agree with Bjorn here. There's no value to this, and many negatives.
> > Are there any RFC documenting RADIUS over unix domain sockets? Are
> > there any clients supporting this? Does your strongswan server support
> > it?
> Whether freeradius should implement this is out of the scope of this
> discussion. I'm just checking if it supports it.
>
> On Mon, May 2, 2022 at 4:30 PM Alan DeKok <aland at deployingradius.com>
> wrote:
>
> > On May 2, 2022, at 3:57 AM, William Tang <galaxyking0419 at gmail.com>
> wrote:
> > >
> > >> I can’t realize a use-case for that… but, if you don’t mind please
> share
> > > with us what you have in mind…
> > > I have a server running both strongswan VPN server and freeradius for
> > > authentication and accounting. Unix domain sockets would be more
> > efficient
> > > for communication between processes on the same machine.
> >
> > There is no reason to believe that's true.
> >
> > I agree with Bjorn here. There's no value to this, and many negatives.
> >
> > Alan DeKok.
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
More information about the Freeradius-Users
mailing list