Red Hat Directory Server 7.1 Performance Tuning and Sizing Guidelines

•Special setting in DirMark: “Bind for every operation” option is selected.

SSL Connection DirMark Search performance

Enable457.3

Disable3988.2

Table 7: RHDS 7.1 performance difference with SSL connection enabled or disabled.

For all the previous data collections, the “bind once as root” option is selected when running DirMark benchmark. It means once a ldap connection is initialized, all the following search operations will use the same connection. In a SSL environment, overhead usually occurs during the connection setup time. To investigate how the extra workload impacts the performance. The “bind for every operation” option is selected when running DirMark benchmark. It ensures a new connection is created for every search requests.

From Table 7, the connect-and-bind performance of RHDS 7.1 is degraded about 872% when SSL is enabled.

Additional Tuning Reference

There are several ways to mange the directory server’s performance by limiting the amount of resources the server uses to process client search requests. For example, size limit attribute, time limit attribute, and etc. can be tuned to limit the resources the server uses. Increasing the checkpoint interval can increase the performance of directory write operations in certain rare conditions. Please be cautious when tuning transaction log related attributes because setting these attributes and other configuration attributes inconsistently may cause the directory to be unstable. Chapter 14, Tuning Directory Server Performance, of the “Red Hat Directory Server 7.1 Administrator’s Guide” provides more detailed information to help optimize directory server performance.

Appendix A: RHDS 7.1 Performance Test Details

Test Environment

Operating System

HP-UX 11i v2 June 2006 release was selected to illustrate the performance of Red Hat Directory Server 7.1 on HP Integrity Servers.

System Parameter Tuning

All the system parameters on the test machines are tuned as recommended in section ”Operating System and System Parameter Tunig” of Sizing and Turning Overview.

General Directory Server Configuration

In order for all the test data to be comparable against each other, assume the data are collected based on the following directory server configuration (unless specified separately within each data collection section.)

1.Logging: access log: off error log: on audit log: off

2.No referrals

3.No replication configured.

4.db-transaction-logging on (default)

5.db-durable-transaction: on (default)

6.db-checkpoint-interval: 60 (default)

7.nsslapd-lookthroughlimit: 5000 (default)

8.nsslapd-maxdescriptors: 4096 (default)

9.nsslapd-sizelimit: 2000 (default)

10.nsslapd-timelimit: 3600 (default)

11.nsslapd-idlistscanlimit: 4000 (default)

12.legacy replication plug-in: ON (default)

Page 15