Re: kerberos capacity planning questions
>>> As part of a campus working group currently evaluating Kerberos product
>>> options, I have been tasked with researching the following two
>>> requirements for MIT Kerberos:
>>> (1) Must house more than 200,000 accounts.
>>> (2) Must issue more than 3 tickets per second.
>> MIT Kerberos can trivially satisfy both of those with any reasonable
>> server hardware. We were doing more authentications per second than that
>> on a now-obsolete Dell 1750. We're now running the primary Kerberos
>> server, which handles almost all the authentications on a Dell 1950.
> Even on non-reasonable hardware. In 1990 I tested our
> pathetic-by-current-standards DECstation 2100-based KDC
> at around 40 tickets/sec (single DES then, of course).
> Our peak second so far today (also on a Dell 1950)
> was 58 tickets issued (we'll do around a million
> over the course of the whole day).
> (FWIW: peak minute was 1248, peak hour 66274)
> Kerberos mailing list [email]Kerberos@mit.edu[/email]
Thank you Russ and John.
As related requirements items, I am also looking for MIT KDC
installations with (1) greater than 50,000 accounts, and (2) greater
than 100,000 accounts (user + service principals). If anyone is
running an MIT KDC this size and can share that information it would be