[RADIATOR] Rejection when server is overloaded?

[Stefan Paetow (OpenSource)]

Hi Radiator folks,



We’ve run across an odd problem. One of our members has staff who visit a
variety of other eduroam organisations in the area, and yet there are some
where it is categorically impossible for them to log in. When I browsed our
logs, we would see an Access-Accept for their login, followed 9 or so
seconds later by an Access-Reject. When we did a tcpdump, we found that the
Access-Reject simply was a ‘Request denied’. Is there a way to see why this
occurs? We’ve run our server in debug mode for a very short period, and
then trimmed the debug log to the approximate period for the messages, and
will be happy to provide those bits, but I’m wondering whether Radiator,
when it is overloaded, simply ignores the packets that keep coming or
rejects them with a ‘Request denied’? If it’s the latter, can that message
be customized to see that this is indeed the case? I’ve added a
RejectHasReason to all the realm handlers on the server to at least see
when there is a problem that way.



Before you ask, we’re already running with an almost maximum queue, on a 32
core processor and 64 threads (two per core) in order to provide enough
threads that can do ‘stuff’. I can only assume this is the right way of
dealing with overloading, i.e. provide more threads?



Any help is very much appreciated.



With kind regards



Stefan Paetow
Federated Roaming Technical Specialist


t: +44 (0)1235 822 125
e-mail/teams: stefan.paetow at jisc.ac.uk
gpg: 0x3FCE5142

On Mondays and Wednesdays, I am not available between 12:00 noon and 15:00.

In line with government advice, at Jisc we’re now working from home and our
offices are currently closed. Read our statement on coronavirus
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.jisc.ac.uk%2Fabout%2Fcorporate%2Fcoronavirus-statement&data=04%7C01%7Cstefan.paetow%40jisc.ac.uk%7Cee8b2d51bbb040db1aa608da0c55aee9%7C48f9394d8a144d2782a6f35f12361205%7C0%7C0%7C637835859438449839%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=SYOtHPy4kUqdAwBynOVP7vmr74c4zGiS2OdFcVCMZoI%3D&reserved=0>
.


jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by
guarantee which is registered in England under Company No. 5747339, VAT No.
GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill,
Bristol, BS2 0JA. T 0203 697 5800.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.open.com.au/pipermail/radiator/attachments/20220324/675ca9d5/attachment.html>