Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Certificate issuance test #57

Merged
merged 1 commit into from
Mar 18, 2024
Merged

Conversation

rcritten
Copy link
Contributor

@rcritten rcritten commented Mar 5, 2024

This test creates a number of clients and enrolls them. Then it creates a number of services for each client and runs ipa-getcert on all of them.

This is to try to identify the number of simultaneous certificate requests that the server can manage. There is no real effort to fully synchronize the requests since in reality they all won't fire at the same time either.

There is one additional tuning option, the WSGI processes, which is not exposed on the command-line. This can be tuned directly in the constants file.

README.md Outdated

```
ipaperftest --test CertIssuanceTest --amount 70 --cert-requests 5
ipaperftest --test CertIssuanceTest --amount 70 --cert-requests 5 -wsgi-processes 8
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

s/-wsgi-processes/--wsgi-processes

@antoniotorresm
Copy link
Collaborator

Ran
ipaperftest --test CertIssuanceTest --amount 70 --cert-requests 5 --wsgi-processes 8
And seems to work fine. LGTM after that minor typo in README.

@antoniotorresm
Copy link
Collaborator

Verified the number of processes is actually set in ipa.conf:

# Configure mod_wsgi handler for /ipa
WSGIDaemonProcess ipa processes=8 threads=1 maximum-requests=500 \
  user=ipaapi group=ipaapi display-name=%{GROUP} socket-timeout=2147483647 \
  lang=C.UTF-8 locale=C.UTF-8
WSGIScriptAlias /ipa /usr/share/ipa/wsgi.py process-group=ipa \
  application-group=%{GLOBAL}
WSGIScriptReloading Off

This test creates a number of clients and enrolls them. Then it creates
a number of services for each client and runs ipa-getcert on all of
them.

This is to try to identify the number of simultaneous certificate
requests that the server can manage. There is no real effort to fully
synchronize the requests since in reality they all won't fire at the
same time either.

There is one additional tuning option, the WSGI processes, which is not
exposed on the command-line. This can be tuned directly in the constants
file.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
@antoniotorresm antoniotorresm merged commit 94bd7fd into freeipa:master Mar 18, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants