[RADIATOR] Hourly Authentication-Count Downward Spikes

[Ullfig, Roberto Alfredo]

Hi, thanks for the response but we're pretty sure now that these spikes represent students moving from class to class logging into different access points along the way.

---
Roberto Ullfig – rullfig at uic.edu
ACCC Research Programmer


-----Original Message-----
From: Hugh Irvine [mailto:hugh at open.com.au] 
Sent: Monday, August 24, 2015 6:34 PM
To: Ullfig, Roberto Alfredo
Cc: radiator at open.com.au
Subject: Re: [RADIATOR] Hourly Authentication-Count Downward Spikes


Hello Roberto -

This is almost always a problem with the backend authentication resource.

A trace 4 debug with LogMicroseconds (requires Time::HiRes from CPAN) will show you how long each processing step is taking.

What I generally see is Radiator waiting for an external resource and at some critical number of requests per second the UDP queue starts to fill up leading to timeouts and retransmissions.

Ie. if the external resource takes say 50 ms to respond, then it follows that at most you can process 20 requests per second - anything over that will lead to the problem I describe.

This is just one theory, but as I say, a trace 4 debug with LogMicroseconds will tell you where to look.

regards

Hugh


> On 25 Aug 2015, at 03:41, Ullfig, Roberto Alfredo <rullfig at uic.edu> wrote:
> 
> Hello all,
> 
>  
> 
> It’s the first day of classes here and we’re seeing hourly successful 
> authentication-count downward spikes starting around 5-10 minutes 
> before the hour – was wondering if any other people here see the same 
> thing in their environments and
> 
>  
> 
> We’re looking at the number of successful authentications per 5 minutes. During the summer we would max out at 5K but there were no downward spikes. We are now hitting 30K (shortly before noon) and this span of perhaps 20 minutes.
> 
>  
> 
> ---
> 
> Roberto Ullfig – rullfig at uic.edu
> 
> ACCC Research Programmer
> 
>  
> 
> <radiusauths.png>_______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
hugh at open.com.au

Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, MacOSX, Solaris, VMS, NetWare etc.