10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Managing<br />

worker<br />

thread<br />

allocation<br />

v<br />

“Configuring<br />

<strong>WebSEAL</strong><br />

worker<br />

threads”<br />

on<br />

page<br />

41<br />

v<br />

“Allocating<br />

worker<br />

threads<br />

<strong>for</strong><br />

junctions<br />

(junction<br />

fairness)”<br />

on<br />

page<br />

42<br />

v<br />

“Configuration<br />

on<br />

AIX”<br />

Configuring<br />

<strong>WebSEAL</strong><br />

worker<br />

threads<br />

The<br />

number<br />

of<br />

configured<br />

worker<br />

threads<br />

specifies<br />

the<br />

number<br />

of<br />

concurrent<br />

incoming<br />

requests<br />

that<br />

can<br />

be<br />

serviced<br />

by<br />

a<br />

server.<br />

Other<br />

connections<br />

that<br />

arrive<br />

when<br />

all<br />

worker<br />

threads<br />

are<br />

busy<br />

will<br />

be<br />

buffered<br />

until<br />

a<br />

worker<br />

thread<br />

is<br />

available.<br />

You<br />

can<br />

set<br />

the<br />

number<br />

of<br />

threads<br />

available<br />

to<br />

service<br />

incoming<br />

connections<br />

to<br />

<strong>WebSEAL</strong>.<br />

Configuring<br />

the<br />

number<br />

of<br />

worker<br />

threads<br />

should<br />

be<br />

done<br />

carefully<br />

due<br />

to<br />

possible<br />

per<strong>for</strong>mance<br />

impacts.<br />

This<br />

configuration<br />

parameter<br />

does<br />

not<br />

impose<br />

an<br />

upper<br />

boundary<br />

on<br />

the<br />

number<br />

of<br />

simultaneous<br />

connections.<br />

This<br />

parameter<br />

simply<br />

specifies<br />

the<br />

number<br />

of<br />

threads<br />

made<br />

available<br />

to<br />

service<br />

a<br />

potentially<br />

unlimited<br />

work<br />

queue.<br />

Choosing<br />

the<br />

optimal<br />

number<br />

of<br />

worker<br />

threads<br />

depends<br />

on<br />

understanding<br />

the<br />

quantity<br />

and<br />

type<br />

of<br />

traffic<br />

on<br />

your<br />

network.<br />

In<br />

all<br />

cases,<br />

you<br />

must<br />

only<br />

enter<br />

a<br />

value<br />

that<br />

is<br />

less<br />

than<br />

the<br />

worker<br />

threads<br />

limit<br />

imposed<br />

by<br />

the<br />

operating<br />

system.<br />

By<br />

increasing<br />

the<br />

number<br />

of<br />

threads,<br />

you<br />

are,<br />

in<br />

general,<br />

decreasing<br />

the<br />

average<br />

time<br />

it<br />

takes<br />

to<br />

finish<br />

the<br />

requests.<br />

However,<br />

increasing<br />

the<br />

number<br />

of<br />

threads<br />

impacts<br />

other<br />

factors<br />

that<br />

could<br />

have<br />

an<br />

adverse<br />

effect<br />

on<br />

server<br />

per<strong>for</strong>mance.<br />

<strong>WebSEAL</strong><br />

maintains<br />

a<br />

single,<br />

generic<br />

worker<br />

list<br />

and<br />

worker<br />

threads<br />

pool<br />

<strong>for</strong><br />

handling<br />

requests<br />

from<br />

clients<br />

using<br />

TCP<br />

or<br />

SSL.<br />

This<br />

enhanced<br />

mechanism<br />

enables<br />

<strong>WebSEAL</strong><br />

to<br />

consume<br />

fewer<br />

system<br />

resources<br />

while<br />

handling<br />

significantly<br />

greater<br />

load.<br />

You<br />

can<br />

configure<br />

the<br />

worker<br />

thread<br />

pool<br />

size<br />

by<br />

setting<br />

the<br />

worker-threads<br />

parameter<br />

in<br />

the<br />

[server]<br />

stanza<br />

portion<br />

of<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file.<br />

[server]<br />

worker-threads<br />

=<br />

50<br />

Note:<br />

The<br />

value<br />

of<br />

this<br />

parameter<br />

must<br />

remain<br />

within<br />

the<br />

worker<br />

threads<br />

limits<br />

set<br />

by<br />

the<br />

operating<br />

system.<br />

Configuration<br />

on<br />

AIX<br />

On<br />

AIX<br />

systems<br />

only,<br />

when<br />

the<br />

<strong>WebSEAL</strong><br />

worker<br />

threads<br />

limit<br />

in<br />

the<br />

[server]<br />

stanza<br />

of<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file<br />

is<br />

increased<br />

beyond<br />

the<br />

default<br />

of<br />

50<br />

to<br />

a<br />

value<br />

greater<br />

than<br />

800<br />

on<br />

an<br />

AIX<br />

system,<br />

<strong>WebSEAL</strong><br />

can<br />

fail<br />

and<br />

produce<br />

a<br />

core<br />

dump.<br />

Workaround:<br />

Increase<br />

the<br />

AIX<br />

process<br />

size<br />

limits<br />

to<br />

unlimited<br />

as<br />

follows:<br />

1.<br />

Locate<br />

the<br />

limits<br />

file<br />

in<br />

the<br />

/etc/security<br />

directory.<br />

2.<br />

Search<br />

<strong>for</strong><br />

the<br />

word<br />

default<br />

and<br />

find<br />

parameters<br />

<strong>for</strong><br />

cpu,<br />

rss,<br />

and<br />

data.<br />

Default<br />

settings<br />

are<br />

as<br />

follows:<br />

data<br />

=<br />

262144<br />

rss<br />

=<br />

65536<br />

Chapter<br />

2.<br />

<strong>WebSEAL</strong><br />

server<br />

configuration<br />

41

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!