MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

What is the performance impact of having many CHLAUTH rules and MCAUSER mappings?

  • 1.  What is the performance impact of having many CHLAUTH rules and MCAUSER mappings?

    Posted Mon December 12, 2011 10:23 AM
    This is a question from the December 8 webcast titled "What's New in WebSphere MQ v7.1 Security?"

    What is the performance impact of having many CHLAUTH rules and MCAUSER mappings?



  • 2.  What is the performance impact of having many CHLAUTH rules and MCAUSER mappings?

    Posted Mon December 12, 2011 03:45 PM
    The CHLAUTH rules and MCAUSER mappings are only evaluated once when the channel starts, so there is zero impact to a running channel.  As part of channel negotiation the additional startup time is negligible.  I suppose if you added enough rules you might be able to make a measurable difference but I don't know what that upper limit is. 

    We currently have a similar situation in that setmqaut rules also match at multiple levels based on precedence.  I have customers with thousands of queues and matching setmqaut rules and the additional overhead of opening a queue and evaluating all those rules is negligible.  I would expect the timings of evaluating CHLAUTH rules would be similar.

    The other point to note is that the performance gains with v7.1 channels will far outweigh the startup cost, even if startup cost were extended by seconds, provided the channels are not constantly being restarted.  If you had a client app that was opening a new channel for every message you might notice a difference but I'd recommend rewriting the app rather than avoiding CHLAUTH.