In my previous blog post, I explained deploying of PDP cluster using WSO2 Identity Server. Each PDP in the cluster exposes their own authorization service (Entitlement service). Therefore we need to setup a load balancer to forward the incoming authorization queries among each PDPs. Then load balancer would expose only a one interface for PEP […]
Month – January 2012
PDP Clustering
One of the important thing that must be supported by the production XACML PDP is that horizontal scaling with high availability and reliability. WSO2 Identity server’s PDP achieves the horizontal scaling using clustering mechanism. In this post i am going to explain deploying of PDP cluster using WSO2 Identity Server. Here following three main points are very important […]
XACML PDP Performance Test Suit
These day, I am going to do a performance test on XACML PDP. Actually with WSO2 Identity Server PDP implementation. But main problem me is to define a proper test suit for these testing. However as a start, I just tried identify the factors that effect for the XACML decision query time. 1. Complexity of Polices, defined in […]
Improving XACML PDP Performance with Caching Techniques
One way of improving the performance of a XACML engine is by using caching techniques. But caching implementation must be designed carefully. Actually when remind the XACMLnetiq identity manager reference architecture, we could identify that, caching can be done in four places 1. XACML Policies can be cached. As policies usually be stored in […]