10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

3.<br />

Change<br />

the<br />

settings<br />

<strong>for</strong><br />

the<br />

data<br />

and<br />

rss<br />

parameters<br />

to<br />

unlimited<br />

using<br />

the<br />

–1<br />

value.<br />

The<br />

–1<br />

setting<br />

specifies<br />

unlimited<br />

or<br />

is<br />

bounded<br />

by<br />

the<br />

capabilities<br />

of<br />

the<br />

operating<br />

system<br />

and<br />

the<br />

CPU.<br />

data<br />

=<br />

-1<br />

rss<br />

=<br />

-1<br />

4.<br />

Reboot<br />

the<br />

system<br />

<strong>for</strong><br />

these<br />

changes<br />

to<br />

take<br />

effect.<br />

Allocating<br />

worker<br />

threads<br />

<strong>for</strong><br />

junctions<br />

(junction<br />

fairness)<br />

You<br />

can<br />

configure<br />

the<br />

allocation<br />

of<br />

<strong>WebSEAL</strong><br />

worker<br />

threads<br />

used<br />

to<br />

process<br />

requests<br />

across<br />

multiple<br />

junctions<br />

on<br />

a<br />

global<br />

or<br />

per-junction<br />

basis.<br />

The<br />

configuration<br />

mechanism<br />

maintains<br />

a<br />

″fair″<br />

distribution<br />

of<br />

worker<br />

threads<br />

across<br />

all<br />

junctions<br />

and<br />

prevents<br />

depletion<br />

of<br />

the<br />

worker<br />

thread<br />

pool<br />

by<br />

any<br />

one<br />

junction.<br />

Background<br />

<strong>WebSEAL</strong><br />

draws<br />

from<br />

its<br />

pool<br />

of<br />

worker<br />

threads<br />

to<br />

process<br />

multiple<br />

requests.<br />

The<br />

number<br />

of<br />

worker<br />

threads<br />

available<br />

to<br />

<strong>WebSEAL</strong><br />

is<br />

specified<br />

by<br />

the<br />

worker-threads<br />

parameter<br />

in<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file.<br />

You<br />

can<br />

adjust<br />

the<br />

worker-threads<br />

value<br />

to<br />

best<br />

serve<br />

your<br />

particular<br />

<strong>WebSEAL</strong><br />

implementation.<br />

When<br />

no<br />

worker<br />

threads<br />

are<br />

available<br />

to<br />

handle<br />

incoming<br />

requests,<br />

users<br />

experience<br />

a<br />

<strong>WebSEAL</strong><br />

server<br />

that<br />

is<br />

not<br />

responding.<br />

Worker<br />

threads<br />

are<br />

used<br />

to<br />

handle<br />

incoming<br />

requests<br />

to<br />

applications<br />

residing<br />

on<br />

multiple<br />

junctioned<br />

back-end<br />

servers.<br />

However,<br />

the<br />

worker<br />

thread<br />

pool<br />

can<br />

be<br />

quickly<br />

drained<br />

if<br />

a<br />

particular<br />

back-end<br />

application<br />

is<br />

unusually<br />

slow<br />

when<br />

responding<br />

to<br />

and<br />

processing<br />

a<br />

high<br />

volume<br />

of<br />

requests.<br />

A<br />

depletion<br />

of<br />

the<br />

worker<br />

thread<br />

pool<br />

by<br />

this<br />

one<br />

application<br />

renders<br />

<strong>WebSEAL</strong><br />

incapable<br />

of<br />

responding<br />

to<br />

requests<br />

<strong>for</strong><br />

services<br />

on<br />

the<br />

remaining<br />

junctioned<br />

application<br />

servers.<br />

You<br />

can<br />

configure<br />

global<br />

or<br />

per-junction<br />

limits<br />

on<br />

the<br />

number<br />

of<br />

worker<br />

threads<br />

used<br />

to<br />

service<br />

applications<br />

on<br />

multiple<br />

junctions.<br />

These<br />

limits<br />

allow<br />

″fairness″<br />

to<br />

prevail<br />

<strong>for</strong><br />

all<br />

junctions<br />

and<br />

prevents<br />

any<br />

one<br />

application<br />

from<br />

claiming<br />

more<br />

than<br />

its<br />

share<br />

of<br />

worker<br />

threads.<br />

Note:<br />

For<br />

in<strong>for</strong>mation<br />

on<br />

worker<br />

thread<br />

resource<br />

usage<br />

limits,<br />

and<br />

<strong>for</strong><br />

instructions<br />

on<br />

detecting<br />

worker<br />

thread<br />

starvation,<br />

see<br />

the<br />

<strong>IBM</strong><br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

<strong>for</strong><br />

e-<strong>business</strong><br />

Per<strong>for</strong>mance<br />

Tuning<br />

Guide<br />

Global<br />

allocation<br />

of<br />

worker<br />

threads<br />

<strong>for</strong><br />

junctions<br />

Two<br />

parameters<br />

located<br />

in<br />

the<br />

[junction]<br />

stanza<br />

of<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file<br />

control<br />

the<br />

global<br />

allocation<br />

of<br />

worker<br />

threads<br />

across<br />

all<br />

junctions<br />

<strong>for</strong><br />

a<br />

particular<br />

<strong>WebSEAL</strong><br />

server.<br />

The<br />

values<br />

used<br />

<strong>for</strong><br />

these<br />

parameters<br />

are<br />

expressed<br />

as<br />

percentages<br />

within<br />

the<br />

range<br />

of<br />

0<br />

to<br />

100.<br />

v<br />

worker-thread-soft-limit<br />

This<br />

parameter<br />

is<br />

set<br />

to<br />

send<br />

a<br />

warning<br />

be<strong>for</strong>e<br />

the<br />

″hard″<br />

limit<br />

is<br />

reached.<br />

When<br />

the<br />

worker-thread-soft-limit<br />

is<br />

exceeded,<br />

warning<br />

messages<br />

are<br />

sent<br />

(every<br />

30<br />

seconds)<br />

to<br />

the<br />

<strong>WebSEAL</strong><br />

error<br />

log<br />

file.<br />

For<br />

example,<br />

when<br />

worker-threads<br />

=<br />

50,<br />

a<br />

setting<br />

of<br />

60<br />

(%)<br />

causes<br />

warning<br />

messages<br />

to<br />

be<br />

issued<br />

when<br />

the<br />

junction<br />

consumes<br />

more<br />

than<br />

30<br />

worker<br />

threads.<br />

All<br />

requests<br />

above<br />

30<br />

worker<br />

threads<br />

are<br />

still<br />

processed,<br />

until<br />

the<br />

″hard″<br />

limit<br />

is<br />

reached.<br />

The<br />

default<br />

value<br />

is<br />

90<br />

percent.<br />

v<br />

worker-thread-hard-limit<br />

42<br />

<strong>IBM</strong><br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

<strong>for</strong><br />

e-<strong>business</strong>:<br />

<strong>WebSEAL</strong><br />

<strong>Administration</strong><br />

Guide

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!