Slower login response times with MySQL

[Jonathan Tran]

Hello everyone,

We are in the process of redeploying/migrating our uPortal instance in AWS using MySQL, but on login we are seeing slower login times. From the browser dev. tools, I see the following timings:

321ms /Login?ticket=

2658ms /Login

712ms /f/home/normal/render.uP

On-premise, we're using Oracle and here are the timings on the same requests:

41ms /Login?ticket=
225ms /Login
248ms /f/home/normal/render.uP

As another datapoint, I am seeing the following response times when running uPortal + MySQL locally (spoiler: they're not great in my opinion)

315ms /Login?ticket=
2908ms /Login
3875ms /f/home/normal/render.uP

Any pointers on what to look for?

Thanks!

[Jim Helwig]

Is there a connection other than MySQL that is being made during login that is on-prem, so it takes longer from your laptop or AWS?

 

JimH

 

-- 

Jim Helwig

University of Wisconsin School of Medicine and Public Health Central IT

Application Development Manager

pronouns:he/him/his

--
You received this message because you are subscribed to the Google Groups "uPortal Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to uportal-user...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/uportal-user/9757d539-4686-4b69-9cc1-6fe20a783468n%40apereo.org.

[Benito Gonzalez]

Hi Jonathan,

Are you using CAS, Shib or another login service?

-bjagg

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/uportal-user/BYAPR06MB53034DAB56C511D204B7222FF6F29%40BYAPR06MB5303.namprd06.prod.outlook.com.

[Jonathan Tran]

> Is there a connection other than MySQL that is being made during login that is on-prem, so it takes longer from your laptop or AWS?

Come to think of it, there is LDAP (although I am under the impression that we have it in AWS as well)

> Are you using CAS, Shib or another login service?

We're using CAS

[Benito Gonzalez]

Locally, performance can be impacted if memory settings are too low or unset. I'd just double-check that.

Otherwise, my suspicion is networking to CAS and LDAP. This delay can include SSL negotiating. Can you access the CAS logs to get a feel for timing on the CAS side?

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/uportal-user/5011c56c-68d9-4427-91c8-7da00ffb7a48n%40apereo.org.

[Jonathan Tran]

I have -Xmx configured to 2G for the moment, increasing that does not appear to have an effect on things

> Can you access the CAS logs to get a feel for timing on the CAS side?

Our IdP team did not note any timing issues on that side of the house.

I increased the logging level on org.jasig.cas.client and this is what I am seeing in portal.log:

DEBUG [http-nio-8080-exec-1-guest] o.j.c.c.v.Cas20ProxyReceivingTicketValidationFilter 2021-08-05 15:54:10,609 - Attempting to validate ticket: {ticket}

...

DEBUG [http-nio-8080-exec-1-guest] o.j.c.c.v.Cas20ProxyReceivingTicketValidationFilter 2021-08-05 15:54:10,738 - Successfully authenticated user: jmt

DEBUG [http-nio-8080-exec-1-guest] o.j.c.c.v.Cas20ProxyReceivingTicketValidationFilter 2021-08-05 15:54:10,738 - Redirecting after successful ticket validation.

[Benito Gonzalez]

That seems to indicate that uPortal is validating a ticket by request to CAS. That network request took over 100ms.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/uportal-user/0c7a6b7d-e569-4c66-ac61-16b65b6f6100n%40apereo.org.

[Jonathan Tran]

Yeah, that is not my top worry. My main concern is that from successful auth. to the portal, it seems as though /Login is spending a significant time on something before responding and rendering the portal to the user. I will continue to poke around and see if I come across anything ...

I appreciate the ideas/insights thusfar :) if there are more, I would be open to them