Implementation Guide › Performance Tuning
Performance Tuning
Performance Tuning Introduced
The Policy Server evaluates and enforces access control policies by servicing three basic requests:
- IsProtected—is the requested resource protected?
- IsAuthenticated—did the user requesting the resource present credentials to establish an identity?
- IsAuthorized—is the authenticated user authorized to view the protected resource?
Servicing each of these requests creates transactions between CA SiteMinder® components. CA SiteMinder® performance tuning is the iterative process of increasing throughput and reducing latency by:
- Understanding where and when these transactions occur
- Identifying the CA SiteMinder® settings and features that affect performance
- Using third-party and CA SiteMinder® tools to measure performance and identify infrastructure bottlenecks
A good strategy is to examine performance factors in the web, application, and data tiers.
Note: CA SiteMinder® is middleware and is not deployed independently. The following sections focus on tuning CA SiteMinder® components in the Web and Application tiers, but not how to tune the actual Web, Application, or Data tiers themselves. See your vendor–specific documentation for more information about tuning the web servers, directory servers, and databases in your environment.
Performance Tuning Roadmap
Performance tuning is an iterative process, and as such, it is important to address the Web, Application, and Data tiers on an individual basis to understand how each can affect overall performance. You can often achieve better performance by changing configuration settings in CA SiteMinder® Agents, Policy Servers, or the CA SiteMinder® policy objects themselves. The following diagram represents a standard deployment and details the individual components that are central to performance.
- The types of web and applications servers deployed in your environment can affect how a CA SiteMinder® Agent and Policy Server communicate.
- The number of available sockets can affect the efficiency in which an agent and Policy Server communicate.
- CA SiteMinder® policy design can affect the efficiency in which the Policy Server services authentication and authorization requests.
- The Policy Server performs a series of services to authenticate and authorize users. These services result in number of reads and writes, collectively known as requests, to a user directory. A contributing factor to CA SiteMinder® performance is determining whether your user directories can handle this workload during sustained and peak periods of operation.
- The user directory itself can affect CA SiteMinder® performance.
More information:
User Store Capacity Planning
CA SiteMinder® Policy Design and Performance
Server Performance
Reduce Traffic between Your Agents and the Policy Server
Data Tier Guidelines
Web Tier Socket Usage
Copyright © 2013 CA.
All rights reserved.
|
|