Measurement and analysis of LDAP performance

Abstract

The Lightweight Directory Access Protocol (LDAP) is being used for an increasing number of distributed directory applications. We describe a tool to analyze the performance of LDAP directories. Using the tool, we study the performance of a LDAP directory under a variety of access patterns. For the purpose of these experiments, we use a LDAP schema that has been proposed for the administration of Service Level Specifications (SLSs) in a differentiated services network. In addition, individual modules in the server and client code are instrumented to obtain a detailed profile of their contributions to the overall system latency and throughput. We discuss the importance of the factors in determining scalability, namely front-end versus back-end processes, CPU capability, and available memory. Under our normal operating conditions, a LDAP directory with 10,000 entries is found to have a response time of 8 ms, and a maximum throughput of 140 search requests per second. Out of the total response latency, approximately 3 ms is associated with connection management, 1.8 ms with retrieval of entries from the database, and 3.2 ms with front-end processing. At high loads, the connection management latency increases sharply to dominate the response in most cases. The Nagle algorithm is found to introduce a very large additional latency, and it appears beneficial to disable it in the LDAP server. The CPU capability is found to be significant in limiting the performance of the LDAP server, and for larger directories, which cannot be kept in memory, data transfer from the disk also plays a major role. The scaling of server performance with the number of directory entries is determined by the increase in back-end search latency, and scaling with directory entry size is limited by the front-end encoding of search results, and, for out-of-memory directories, by the disk access latency. We investigate different mechanisms to improve the server performance.