Access logging enabled to ensure SSL functions correctly

Table 7 shows that the connect-and-bind performance of HPDS 8.1 is degraded about 872% when SSL is enabled.

Table 7: Performance in relation to SSL connection setting (Enabled or Disabled)

SSL Connection

Searches per second

Enable

1963.33

Disable

7259.05

For all the previous data collections, the “bind once as root” option is selected when running the benchmark test with the rsearch script. It means once an ldap connection is initialized, all the following search operations will use the same connection. In an SSL environment, overhead usually occurs during the connection setup time. To investigate how the extra workload affects the performance, the “bind for every operation” option is selected when running the benchmark test with the ldclt script. This ensures a new connection is created for all search requests.

The rsearch and ldclt scripts are located in the /opt/dirsrv/bin directory on a system installed with HPDS 8.1.

Additional tuning reference

There are several ways to manage the directory server’s performance by limiting the amount of resources the server uses to process client search requests. For example, the size limit attribute, time limit attribute, and so forth can be tuned to limit the resources the server uses. Increasing the checkpoint interval can increase the performance of directory write operations in certain rare conditions. Be cautious when tuning attributes related to the transaction log, because setting these attributes and other configuration attributes inconsistently may cause the directory to be unstable. The “Tuning Directory Server performance” chapter of the HP-UX Directory Server administrator guide provides more detailed information to help optimize directory server performance.

Appendix A: HPDS 8.1 performance test details

Test Environment

Operating system

The HP-UX 11i v3 release (Update 8, March 2011) was selected to illustrate the performance of HP- UX Directory Server 8.1 on HP Integrity servers.

System parameter tuning

All the system parameters on the test machines are tuned as recommended in the “Sizing and tuning overview” section.

General directory server configuration

For all the test data to be comparable, assume the data is collected based on the following directory server configuration (unless specified separately within each data collection section.)

1.Logging: access log: off error log: on audit log: off

2.No referrals

16