download the new for ios Run-Command 6.01

Newer CPUs generally improve the authentication, but adding more CPU cores does not improve performance due to the single-threaded nature of Python.Ĭonsider using load balancers when your expected authentication rates exceed the maximum stated for your Authentication Proxy operating system and your intended authentication configuration. If you suspect performance issues then check your single-core CPU usage and consider horizontal scaling if this core usage is high. The Authentication Proxy processes are mostly CPU-bound. We encourage you to balance security with performance and not opt for less-secure authentication configurations (such as plain LDAP without TLS) to gain a performance boost. The Authentication Proxy performance testing used Amazon Web Services (AWS) m4(Intel(R) Xeon(R) CPU E5-2686 v4) instances. For example, the effective authentication rates for various combinations on a Linux server will be: Linux Proxy Configuration Note that use of LDAP or TLS on Linux decreases the authentication rate by 250 auths/minute on each side.

Use this guidance as you design your Authentication Proxy server deployment. Installation Authentication Proxy Performance Recommendations

In addition to providing two-factor authentication, the Duo Authentication Proxy is a required component for importing Active Directory or OpenLDAP users into Duo via sync, Active Directory authentication for Duo Single Sign-On, and can also act as an HTTP proxy itself for other systems that also need to contact Duo's cloud service. If your organization requires IP-based rules, please review this Duo KB article. Firewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. The Authentication Proxy communicates with Duo's service on TCP port 443.

Download the new for ios Run-Command 6.01