Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Expected capacity for C3010 hardware servers

This thread has been viewed 9 times
  • 1.  Expected capacity for C3010 hardware servers

    Posted Sep 25, 2023 06:39 AM

    Hi

    What is the expected numbers of authentications per minute and day on a hardware C3010 running 6.10.8?

    One of my customers running a ClearPass cluster consisting of 5 nodes have run into som performance related issues.

    The servers run out of diskspace and trigger aggressive cleanup. Initially I suspected Insiht as the Insight db was over 600 Gb, but after adjusting the retention to a minimum the size of the Insight db is now about 50-60 Gb.

    During the weekend the Publisher, not running Insight, run out of diskspace and I can't understand why. Currently the server have 61 % free diskspace.

    Number of requests on the main site for the cluster is about 1000-1500 authentication requests per minute and 3000-3500 authorizations per minute.

    Is this number of requests too high for the C3010 to handle?



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP 2023, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACDP , ACEP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------


  • 2.  RE: Expected capacity for C3010 hardware servers

    Posted Sep 25, 2023 08:59 AM

    https://www.hpe.com/psnow/doc/a00100074en_us




  • 3.  RE: Expected capacity for C3010 hardware servers

    Posted Sep 27, 2023 04:40 PM

    Thank you!

    I had missed the table with the expected numbers of authentications and authorizations in the end of the document.

    But in this document I miss some information on how much data this amount of traffic is expected to generate in form of logs and how to estimate how log retention time it's possible to have depending on the load of the server.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP 2023, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACDP , ACEP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------