Tech Talk: Want to get in on the Secret? How fast is your Directory?

World®
’16
Tech Talk: Want to Get in on the
Secret? How Fast is Your Directory?
Greg Vickery – Principal Services Consultant – CA Technologies
SCT45T
SECURITY

2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

Abstract
CA Directory has consistently outperformed
leading directory services when tested against
other third-party products. How fast is your
directory? Why settle for good performance
when you can have great performance. Come
by and learn more.
Greg Vickery
CA Technologies
Principal Services
Consultant

Agenda
WHAT IS PERFORMANCE?
WHY IS PERFORMANCE IMPORTANT?
OPERATIONS MADE EASIER
MORE THAN JUST SEARCH
REPLICATION PERFORMANCE NOT JUST UPDATE PERFORMANCE
OPTIMIZE THE CONFIGURATION
1
2
3
4
5
6

Directory Review
§ Application communicating with a
data store
– Via protocol - LDAP
§ Performance:
– How quickly is data available
– How quickly is data replicated
Level Set the Conversation
LDAP
Application Layer

Why Is Performance Important?

CA Directory Performance
§ Support Increased Online Presence
§ Directory Performance translates into User Experience
§ An Application Transaction may be several Directory requests
– CA SSO Transaction often includes 3+ Searches, a Bind and an Update
for every authentication
– Just a few extra milliseconds on each can add up to slow response times
Consider Application Behavior

§ Business Units often Drive Dev Teams
– Developers may not have time to integrate to other applications
– Tight Timelines often mean inefficient Applications
Case Study:
A single user authentication causes up to 15 requests on the directory
§ Not the Dev Teams fault
– Directory Infrastructure must support this Fact.
Performance to Offset Application Inefficiencies

Let’s Talk Performance!

§ Performance
– Raw through-put - Fast Search/AuthN/Updates/Replication
§ Small footprint – Very large environments w/ fewer servers
– Less to manage and monitor
§ Operational Advantages (easy to manage)
– No Tuning Required (no maintenance)
– Very fast backup and restore
Expand the ‘Performance’ Discussion

Customer Testing (With Only 4 Directory Servers)
61,795
Operations / Second
147,432
Operations / Second
2,125
Operations / Second
Performance (All tests for a period of 30 minutes – over SSL)
User Search and
Authentication
(bind)
User Searches
Modify (~17 ms
replication to all)

A Memory Mapping Approach Is Much Faster Than Its
Database-Driven Counterparts
LDAP Cache + Database Memory-Mapping
Results
§ 10,000 reads/sec
§ 10,000 writes/sec
Results*
§ 1000 reads/sec
§ 100 writes/sec
LDAP Database
Cache
CA Directory Disk
Disk
I/O
Memory
File
Memory Map
I/O
vs
* Results based on internal testing

Importance of Fast Replication

CA Directory
Replication – Directory Server to Directory Server

Data Center BData Center A
CA Directory Has Advanced Replication Features
That Ensure Data Is in Synch Across Servers
Advanced
Replication
Details
§ True multi-master replication
§ Any Server can accept an update request
§ Flexible replication strategy
§ Synchronous or asynchronous replication
§ All data replicated before client update is
confirmed
§ Can mix and match synchronous and
asynchronous servers (synchronous within
the datacenter and asynchronous to other
data centers)
§ Synchronous Multi-write replication
§ All DSAs are updated at the same time
§ Write Through (Sync) vs. Write Behind
(Async/change logs)
Server #1
Server #2
Server #3
Server #4
LDAP Client
Synchronous
Asynchronous
LDAP

Factors of Performance
§ Data Partitioning (Internal to CA Directory)
– Applications view as one ‘OU’
– Increases Update/Replication Performance
§ More CPUs involved means more speed!
§ 3 Partitions can increase write performance by ~3 times
§ Real Customer running nearly 10,000 replicated updates/second
Configuration and Environment

More Recent Customer Testing (8 Servers)
9,700+
Updates / Second
Performance Update Numbers – With Partitioning
Replicated
Modification
• Partitioned Data
• All Directory Servers
updated in ~15 ms

Replication
§ High Replication Performance Allows
– Accurate Load Sharing
– Fail-over with confidence
– No confusion on which is the ‘Gold’ copy in case of an outage
Applications Update the Directory More Than Ever

Performance Tuning and Operations

§ Hardware Factors
§ CPU – The faster the Clock Speed, the faster the Directory
Server
§ RAM – CA Directory requires appropriate RAM
§ Data and Indexes exist entirely in memory
§ CA Directory can leverage additional hardware for better performance
§ More CPUs or more Physical Servers allow Data Partitioning

§ Physical vs. Virtual
– We have seen inconsistent performance on virtual servers
§ Roller Coaster performance profile
– Remember - The Directory is the Data Layer
§ Important piece of the infrastructure
– Directory Servers must work together during replication
§ One slow Directory Server has an impact on others

§ Built in Load-Sharing Capability
§ Optimize Indexes for Update Performance
§ Optimize the ‘Transaction Log’
– Protection in the event of a hard shutdown
– Written to disk for auto-recovery
– Can make Directory Server I/O bound
– SAN for the TL gives both performance and reliability!

Operations Made Easy
§ On-line backups
– On-line backups are taken in just seconds w/o interruption of service
– Fast, Fast – no need for incremental (full snapshot)
– On Demand or Scheduled – daily, hourly, whenever needed
– Produces a ‘zdb’ file which is portable for restoring other DSAs
§ Just move the zdb file to the other server and rename to ‘<DSAname>.db’ and start the directory
§ Data File (.db) requires no maintenance
– Never need to ‘tune’ the db.
Very Low Maintenance

Quick Recap
§ Search Performance is Important
§ Update/Replication is more important
§ Optimize Configuration to meet the Highest Requirements
§ CA Directory can take advantage of available HW
§ Operations made easier (less moving parts)
– Increase update (and remove) performance
– Manage memory requirement
§ Transaction Log
– Protection in the event of a hard shutdown
– Written to disk for auto-recovery
– Can make Directory Server I/O bound
– SAN for the TL gives both performance and reliability!
Performance is Measured in Many Ways

Recommended Sessions
SESSION # TITLE DATE/TIME
SCX12E Five Easy Steps for Migrating to CA Directory 11/15/2016 at 3:30 pm
SCX305 Best Practices for Upgrading SSO 11/15/2016 at 9:00 am
SCT44T WAM & Federation (Tech Talk) 11/17/2016 at 4:30 pm

Don’t Miss Our INTERACTIVE
Security Demo Experience!
SNEAK
PEEK!

We want to hear from you!
§ IT Central is a leading technology review site. CA has them to
help generate product reviews for our Security products.
§ ITCS staff will be at most sessions. If you would like to offer a
product review, please ask them after the class, or go by their
booth.
Note:
§ Only takes 5-7 mins
§ You have total control over the review
§ It can be anonymous, if required

Questions?

Stay connected at communities.ca.com
Thank you.

Security
For more information on Security, please visit:
http://cainc.to/EtfYyw

Tech Talk: Want to get in on the Secret? How fast is your Directory?

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Tech Talk: Want to get in on the Secret? How fast is your Directory?

Similaire à Tech Talk: Want to get in on the Secret? How fast is your Directory? (20)

Plus de CA Technologies

Plus de CA Technologies (20)

Dernier

Dernier (20)

Tech Talk: Want to get in on the Secret? How fast is your Directory?