[keycloak-dev] Keycloak benchmarks / Performance Guide

[Stian Thorgersen]

----- Original Message -----
> From: "George Leon" <g.leon at betiator.com>
> To: keycloak-dev at lists.jboss.org
> Cc: "George Karoulas" <g.karoulas at betiator.com>, stratos at betiator.com
> Sent: Tuesday, 9 June, 2015 1:03:45 PM
> Subject: [keycloak-dev] Keycloak benchmarks / Performance Guide
> 
> Hi Keycloak Team ,
> 
> We are evaluating to use in production and have 2)  questions
> 
> 1)
> Any information on Keycloak  benchmarks  would help us decide what Hardware
> we will need   for example
> 1  Wildfly/Keycloak server with 4 cores CPU with 8GB memory  and
> 1  separate  Mysql DB  with 4 cores CPU with 8GB  with JDBC data connection
> pooling set to 30 connections say
>    for example can  handle   ??????  concurrent  user longings .

We have only done limited benchmarks currently and what hardware you need would be very related to what your usage is (number of users, how often they login/logout, token timeouts etc.).

In production you should consider having a cluster with at least 2 nodes for availability, this would also help with performance. Keycloak doesn't require a sticky load balancer, services can verify tokens without request to KC, etc. so it should scale well.

> 
> 2)
> What server-cache is used and what control  will we have like configuration
> options other than maxSize
> Also what unit is maxSize memory  in ?

In production I recommend using the Infinispan cache, not the basic in-mem cache. This will also give you more control of cache eviction, etc..

See http://keycloak.github.io/docs/userguide/html/clustering.html

> Docs Reference :
> http://keycloak.github.io/docs/userguide/html/server_cache.html Thanks again
> and Great work with Keycloak
> G.Leon
> 
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev