SRA gateway - performance problems

Hi!

I'm experiencing slow response with SRA gateway when I stress the home page in a site www.example.com. I redirected the SRA default home page to a custom application home page.

In my deployment, I have one machine with SRA 2005Q1 and my application is running in another machine with Application Server 7 EE UR4.

I stressed the application with two tools: Jmeter and Pureload, getting the same results. I put only one worker, 1 thread and 20 iterations, so it's a very low load for the response that I'm getting.

When I test the application directly, without SRA, I get a very good average response of about 300ms, but when I test the application with SRA gateway protecting the application, I get an average response from 12 to 16 seconds!

I followed all SUN tuning recomendations and ran the perftune script and still got the same results.

When I execute the stress tests, the processor has a load of 4% and the memory usage is 14%.

After analyzing the results I noticed that the main page loads quickly but the average load time of the images is very high. I searched in sunsolve for similar problems with SRA slow loading of images and static content, but I didn't find anything.

Anyone has the same problem? any ideas how to solve it? where can I find more documentation?

thx in advance.Hjuarez :)

[1371 byte] By [hjuarez] at [2007-11-26 8:15:26]
# 1

Hi There.

First off, I'd do a few things, what's your threadpool set to? default is 200, i'd bump this to 500.

Honestly, I'd test it with NO TUNING, (method of my madness) IE your 'gateway' script CMD variables, Just modify the min and max memory setting, default is 64 and 128, i'd set it to 128 and 1024-2048, and remove all over tuning suggestions (unless you have GC monitoring variables.

my portal system get's 220,000 logins a month, and my gateway is a 280R 2x900mhz sparc 3 system, and it's extremely fast (well, as fast as the gateway goes anyhow :-) )

- I'd be interested to see your results, I have 2004Q2 on my system. there's various other factors in play here, but I tried a 'tuned' gateway, and it was 25-30 % slower then 'untuned' and i've been running my gateway with this minimal tuning since oct 05. I've had no stability problems.

in your amconsole gateway setup area, do you have persistent connections on or off? on=faster throughput, but on my system cause JSS/NSS issues, and gateway coredumps, so it's off right now.

Dave

PS how is jmeter and pureload working for you?

mc2104dave at 2007-7-6 21:13:12 > top of Java-index,Web & Directory Servers,Portal Servers...
# 2

Typically the application that you want to protect will contain a lot of image URL's. You should enter base URL of all distinct images to the Non-Authenticated URL list of the gateway profile in question. This attribute can be found in PsConsole under Sra->Profiles->[Select a profile]->Security tab.

What this does is that it does not try to do a check for valid SSOToken for all the URL's in this list and hence can considerably improve performance.

Try this and let me know if you see a performance difference.

SnadeepSoni at 2007-7-6 21:13:12 > top of Java-index,Web & Directory Servers,Portal Servers...
# 3

Typically the application that you want to protect will contain a lot of image URL's. You should enter the distinct base URL's of all images to the Non-Authenticated URL list of the gateway profile in question. This attribute can be found in PsConsole under Sra->Profiles->[Select a profile]->Security tab.

What this does is that it does not try to do a check for valid SSOToken for all the URL's in this list and hence can considerably improve performance.

Try this and let me know if you see a performance difference.

- Sandeep Soni

Message was edited by:

SandeepSoni

SandeepSoni at 2007-7-6 21:13:12 > top of Java-index,Web & Directory Servers,Portal Servers...
# 4

I tried putting all images base directories to the Non-Authenticated URLs and I have the same response time. Before I have readed your post, I have configured the base directory of all images in the Non-Authenticated URLs; This time I just add all the subdirectories where I have images and it doesn't work.

After testing, I noticed that the user experience is not as bad as the results showed bye the stress tools. I feel that the stress tools have some problems loading the images and CSS.

Other issue maybe that the machine has low memory, let me know if SRA can run in a machine with 2GB in memory.

I modified the gateway CMD line in order to increase the memory heap and eliminate the Garbage collection options.

Thanks ins advace

hjuarez at 2007-7-6 21:13:12 > top of Java-index,Web & Directory Servers,Portal Servers...