IBM Security Verify

 View Only
  • 1.  Rp & Large File Upload

    IBM Champion
    Posted Wed July 17, 2019 12:52 PM

    Hi community

     

    I'm interested to know if there are some silver-bullet WRP (WebSEAL) tunings to consider when it is required to support efficiently large document upload. By large document upload, I mean anything in the order of 1~512 MB. The concern here is not how to enable large content upload (that works right now already), but really to be sure that WebSEAL manages its i/o buffer sizes or internal memory malloc policies (if such thing still exists in the Appliance world) in the most efficient way possible, and thus reducing the time that WebSEAL takes to read and transfer to the junctioned server the related content.

    Thanks




    ------------------------------
    Sylvain Gilbert
    ------------------------------


  • 2.  RE: Rp & Large File Upload

    Posted Thu July 18, 2019 05:18 PM
    Sylvain,

    Unfortunately there is no silver bullet setting that you can use - every environment is different and you need to make the best decision based on your knowledge of the environment.

    When WebSEAL is proxying a file upload operation it will simply stream the file from the client to the server.  This means that it will read a certain number of bytes from the client socket, and then immediately write those bytes to the server socket (no processing is done on the bytes which are being streamed).  The 'number of bytes' which are used in a single streaming read/write operation is controlled by the '[server] io-buffer-size' configuration entry (by default this is set to 16K).  So, the smaller the setting the more read/write operations that will take place (which will slow things down), but additional memory is consumed when you make this setting larger.  So, it really comes down to how many concurrent upload requests you are likely to receive and the amount of memory which is available to the WebSEAL process.

    Additional factors like MTU can also impact things - but is beyond the scope of this posting.

    I hope that this has helped.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------



  • 3.  RE: Rp & Large File Upload

    IBM Champion
    Posted Fri July 19, 2019 05:12 PM

    Scott

    This is exactly the answer that I needed. Will play around with this configuration setting, now understanding how it works, and the performance trad offs to factor in the equation.

     

    I compared with an old ISAM V7 webseal template configuration file and the default value was set to 4K at the time I believe. Now in V9 it was bumped to 16 K, good thing.

     

    Thanks

     



    ------------------------------
    Sylvain Gilbert
    ------------------------------