A.4 Test Environment: Advanced Session Assurance

These tests are run on Access Manager 4.3. Later versions of Access Manager are expected to behave in the similar manner.

A.4.1 Hardware Configuration

The hardware layout and distribution of virtual machines are only for the test purpose. It is recommended to not combine the critical resources on the same ESX server.

The tests are run on a virtualized lab with the following configuration:

Hardware

Virtual Machines

Dell PowerEdge R7720xd

  • CPU: 12 Cores @ 2.9GHz –

  • RAM: 96 GB

  • VMWare ESXi 5.5

Administration Console

  • CPU: 4 Cores @ 2.9GHz

  • RAM: 8 GB

LDAP User Store-1

  • CPU: 4 Cores @ 2.9GHz

  • RAM: 8 GB

LDAP User Store-2

  • CPU: 4 Cores @ 2.9GHz

  • RAM: 8 GB

Dell PowerEdge R710xd

  • CPU: 12 Cores @ 2.9GHz

  • RAM: 86 GB

  • VMWare ESXi 5.5

Identity Server

  • CPU: 8 Cores @ 2.9GHz

  • RAM: 16 GB

Dell PowerEdge R730xd

  • CPU: 16 Cores @ 2.9GHz –

  • RAM: 132 GB

  • VMWare ESXi 5.5

Access Gateway

  • CPU: 8 Cores @ 2.9GHz

  • RAM: 16 GB

Web Server-1

  • CPU: 4 Cores @ 2.9GHz

  • RAM: 8 GB

Web Server-2

  • CPU: 4 Cores @ 2.9GHz

  • RAM: 8 GB

A.4.2 Access Manager Tuning

Login pages used in testing are customized. The following are component-specific settings:

Identity Server:

  • Tomcat is set with 8 GB memory in tomcat.conf.

    JAVA_OPTS="-server -Xmx8192m -Xms8192m -Xss256k "

  • Tomcat connector maximum threads is set to 1000 (maxThreads="1000") in server.xml for port 8443.

  • LDAP load threshold (ldapLoadThreshold) is set to 600 in web.xml.

Access Gateway:

  • Tomcat is set with 8 GB memory in tomcat.conf.

    JAVA_OPTS="-server -Xmx8192m -Xms8192m -Xss256k "

  • Tomcat connector maximum threads is set to 1000 (maxThreads="1000") in server.xml for port 8443.

  • Apache mpm_worker_module in httpd-mpm.conf is configured with the following settings:

    <IfModule mpm_worker_module>
        ThreadLimit 300
        StartServers 3
        MaxClients 3000
        MinSpareThreads 3000
        MaxSpareThreads 3000
        ThreadsPerChild 300
        ServerLimit 10
        MaxRequestsPerChild 0
    </IfModule>

A.4.3 Test Tool

Silk Performer 17.0 is used in testing.

A.4.4 Session Assurance Parameters

The performance tests are run by enabling the following default session assurance parameters:

  • Request Header Set

  • Hardware Parameters

  • Language Set

  • Operating System Parameters

  • TimeZone Offset

  • User Agent