Re: slapd-mdb network performance

["Jancewicz, Russell" <russell.jancewicz@uconn.edu>]

On Nov 6, 2013, at 14:26, Quanah Gibson-Mount <quanah@zimbra.com> wrote:

> --On Wednesday, November 06, 2013 6:48 PM +0000 "Jancewicz, Russell" <russell.jancewicz@uconn.edu> wrote:
> 
>> Just before turning to this list i gave one last shot in the dark attempt
>> running my query using the rootDN. This produced the expected results.
>> 
>> When queried with a typical account DN my system was transmitting around
>> 2.0Mbps to the remote client.  When queried with the rootDN my system was
>> transmitting around 100Mbps to the client.
> 
> The rootdn bypasses all ACL evaluation.  Do you have complex ACLs?
> 
> --Quanah
> 
> --
> 
> Quanah Gibson-Mount
> Architect - Server
> Zimbra, Inc.
> --------------------
> Zimbra ::  the leader in open source messaging and collaboration

The system currently has around 30 olcAccess stanzas, the majority of which utilize the set notation to grant access based on groups. 
I decided it might be wise to test the speed of the search using ldapi:/// and the account and it does appear to suffer from the same latency issues, so I this does likely stem from ALCs.

Is there any cpu tuning or ACL tuning I should do to improve the overall response time? 
I haven't adjusted the stock threads and am running on a virtual machine with 2 VCPUs (though i suspect a single request would only spawn a single thread).
with regard to ACLs would it be better to use groups or individual olcAccess lines per account? 

-Russell J. Jancewicz
University of Connecticut