HP-UX Directory Server 8.1 Performance Tuning and Sizing Guidelines

ManualsBrandsHP ManualsSoftwareHP-UX Directory Server

HP-UX Directory Server 8.1 Performance

Tuning and Sizing Guidelines

HP-UX 11i v3 Integrity Systems

Technical white paper

Table of contents

Overview ............................................................................................................................................ 2

Product overview ............................................................................................................................. 2

Purpose of this document .................................................................................................................. 2

Sizing and tuning overview ............................................................................................................... 2

Sizing and Tuning Recommendations ..................................................................................................... 4

Sizing guidelines ............................................................................................................................. 4

Tuning recommendations .................................................................................................................. 5

Performance measurements ................................................................................................................. 12

Purpose ........................................................................................................................................ 12

Test results ..................................................................................................................................... 12

Additional tuning reference ................................................................................................................. 16

Appendix A: HPDS 8.1 performance test details .................................................................................... 16

Test Environment ............................................................................................................................ 16

Performance Monitoring Tools ......................................................................................................... 17

Performance Data Creation ............................................................................................................. 17

For more information .......................................................................................................................... 18

Call to action .................................................................................................................................... 18

Summary of content (18 pages)

PAGE 1
HP-UX Directory Server 8.1 Performance Tuning and Sizing Guidelines HP-UX 11i v3 Integrity Systems Technical white paper Table of contents Overview............................................................................................................................................ 2 Product overview ............................................................................................................................. 2 Purpose of this document ...................................................
PAGE 2
Overview Product overview The HP-UX Directory Server version 8.1 provides an industry standard centralized directory service upon which to build your intranet or extranet. Your directory-enabled applications use the directory service as a common, network-accessible location for storing shared data such as user and group identification, server identification, and access control information.
PAGE 3
• • • Any HP Integrity server architecture with an Intel® Itanium 2 processor or Intel® Itanium 2 dual core processor. When correctly tuned, the eventual performance bottleneck will be CPU. At least 256 MB of memory. However, for best performance on large directories, plan for 512 MB to 4GB or more of RAM.
PAGE 4
• • • • • Tune the cache size big enough to fully utilize the cache. Two caches are available: database cache and entry cache. The database cache caches raw pages of the database files. The entry cache caches each entry that has been accessed in memory. For more information, see the “Tuning recommendations” section. Turn the access log off if you do not need it. Access log contains information for all the operations. By default, the access log is turned on.
PAGE 5
Memory The HP-UX Directory Server caches entry and indexing information in memory. It requires at least 256 MB of memory for a small deployment, but for large deployments it needs 512 MB to 4 GB or more RAM for best performance. To estimate how much RAM is needed for the directory server, use the following formula: Total_HPDS_RAM = 1.2 * (base_RAM_need_for_slapd_process + caches) Where base_RAM_needed_for_slapd_process = 27 MB + nsslapd-threadnumber * 0.25MB caches = dbcache + SUM(all entry caches)* 2.
PAGE 6
nsslapd-threadnumber is set to 6 or 8 (on a Montvale-based test bed with 8 CPUs). Based on the performance test experiment, the best exact search performance occurs only when nsslapdthreadnumber is tuned close to the number of CPUs. This performance characteristic is verified with up to 8 CPUs on a Montvale-based test bed.
PAGE 7
overridden when the server replaces these values with its own guessed values at a later stage of the server startup. For more technical information on this attribute, see the cache size section of the Berkeley DB reference guide. Attempting to set a value that is not a number or is too big for a 32-bit signed integer returns an LDAP_UNWILLING_TO_PERFORM error message with additional error information explaining the problem. The server has to be restarted for changes to this attribute to take effect.
PAGE 8
Equation 1: Estimate Size of Database Cache dbcachesize = SUM(allDB4files) Note: Equation 1 gives you a very rough estimation for dbcachesize. When estimating database cache size, include only those database (db4) files that your operations need. For example, if your directory server only needs to support exact search requests on the “cn” attribute, you may need just 354MB dbcache instead of 685MB dbcache which is the sum of all database (db4) files for the 250K databases.
PAGE 9
with additional error information explaining the problem. Entry DN: Valid Range: Default Value: Syntax: Example: cn=database_name, cn=ldbm database, cn=plugins, cn=config 500Kb to 4 GB for 32-bit platforms, and 500Kb to 2^64 -1 for 64-bit Platforms 10,485,760 (10Mb) Integer nsslapd-cachememsize: 10485760 nsslapd-cachesize: This performance tuning attribute specifies the cache size in terms of the entries it can hold.
PAGE 10
Step 4: If the currententrycachecount is less than total number of entries in your database, and the maxentrycachesize has not reached the maximum value that is available from your system, increase nsslapd-cachememsize, and repeat from Step2 until all the entries are cached or nsslapd-cachememsize has reached the maximum value from your system.
PAGE 11
Figure 3: Performance based on percentage of database entries in the entry cache 20000 18000 16000 operations/sec 14000 12000 10000 8000 500k 6000 4000 2000 0 0% 20% 40% 60% 80% 100% 120% % of database entries in entrycache nsslapd-cache-autosize The nsslapd-cache-autosize parameter is described as follows in the HP-UX Directory Server configuration, command, and file reference.
PAGE 12
• • • Access log: The access log contains detailed information about client connections to the directory. It provides beneficial troubleshooting information. Access logging is enabled by default. Error log: The error log contains detailed messages about errors and events that the directory experiences during normal operations. Error logging is enabled by default. Audit log: The audit log contains detailed information about changes made to each database and to server configuration.
PAGE 13
Data collection 2: (Different values of nsslapd-threadnumber) This set • • • of data is collected to show how the tuning of HPDS worker threads affects the performance. Number of entries: 100,000 entries Number of client threads: 128 HPDS settings o nsslapd-dbcachesize: 100,000,000 (100MB) o nsslapd-cachememsize: 1,000,000,000 (1GB) o nsslapd-accesslog-logging-enabled: off o nsslapd-threadnumber: Table 2 shows how values of the nsslapdthreadnumber parameter affect search performance.
PAGE 14
nsslapd-dbcachesize 300,000,000 400,000,000 Searches per second 17796.85 17634.52 Because there is no particular method to determine how big the dbcache is at any given time, data shown in Table 3 is collected based on the full entry cache and different settings of nsslapddbcachesize starting from the minimum value of 500,000.
PAGE 15
Table 5: Performance in relation to nsslapd-cachesize/nsslapd-cachememsize for various database sizes Searches per second with Number of Entries Searches per second with cachememsize default, in the Database cachememsize 100% or max, cachesize 1, cachesize -1, dbcachesize 100% or max dbcachesize 100% or max 100 19597.22 12049.68 10,000 19169.68 11314.75 100,000 18983.23 11399.68 250,000 18545.38 11056.25 500,000 18487.29 11048.27 1,000,000 18398.92 10817.
PAGE 16
• Access logging enabled to ensure SSL functions correctly Table 7 shows that the connect-and-bind performance of HPDS 8.1 is degraded about 872% when SSL is enabled. Table 7: Performance in relation to SSL connection setting (Enabled or Disabled) SSL Connection Searches per second Enable 1963.33 Disable 7259.05 For all the previous data collections, the “bind once as root” option is selected when running the benchmark test with the rsearch script.
PAGE 17
3. No replication configured. 4. db-transaction-logging on (default) 5. db-durable-transaction: on (default) 6. db-checkpoint-interval: 60 (default) 7. nsslapd-lookthroughlimit: 5000 (default) 8. nsslapd-maxdescriptors: 4096 (default) 9. nsslapd-sizelimit: 2000 (default) 10. nsslapd-timelimit: 3600 (default) 11. nsslapd-idlistscanlimit: 4000 (default) 12. legacy replication plug-in: ON (default) 13. 7-bit check plug-in: on (default) 14. Schema checking: on (default).
PAGE 18
For more information The latest information about HP-UX Directory Server, including current release notes, complete product documentation, technical notes, and white papers, as well as other HP Internet and Security products, is available at: http://www.hp.com/go/hpux-security-docs For more information about HP Servers, see: • HP BladeSystem: http://www.hp.com/go/blades • HP Integrity Server Family: http://www.hp.com/go/integrity Call to action HP encourages your comments concerning this document.