Subject: [nfsv4] [FedFS] Open LDAP and Windows AD performance

From: Paul Lemahieu <[email-masked]>
Date: Thu, 28 May 2009 15:21:31 -0700

Per our FedFS dicussion on LDAP performance and scaling.

Some performance numbers for Windows 2003 Active Directory with a 100K  
user entry database:

    * 2K kerberos logon ops/sec
    * 22K "search base 1 attr" ops/sec
    * 2 (yes, 2) "search nonindexed 1 attr" ops/sec

The full report is here: http://www.microsoft.com/downloads/thankyou.aspx?familyId=52e7c3bd-570a-475c-96e0-316dc821e3e7&displayLang=en

The 2 ops/sec for non-indexed searches is pretty dramatic.

Some performance numbers for a 1M user entry database:

    * OpenLDAP: 23K authentication ops/sec
    * Windows AD: 5K authentication ops/sec

Here's a link to that information:

    http://www.connexitor.com/blog/pivot/entry.php?id=185

For our ballpark calculations, we should comfortably expect many  
thousands of lookups per second.

--Paul