Sun Java logo     Previous      Contents      Index      Next     

Sun logo
Sun Java(TM) System Directory Server 5.2 2005Q1 Technical Overview 

Chapter 3
Directory Server Performance

Since Directory Server provides the foundation for the new generation of e-business applications and Web services, it is essential that strong performance be maintained. This chapter examines Directory Server indexing which helps boost directory performance and other substantial performance improvements brought in this release. This chapter is divided into the following sections:

Using Indexes for Efficient Searches

Directory Server implements indexes so that you can search quickly the data in your directory. The index files are stored in the directory's databases. Directory Server supports the following types of indexes:

You can use separate, specialized indexes for masters and consumers in a replication scenario. For example, a master replica might contain a UID index, a series of consumers that are used for phone number look-ups might contain a phone number index, another consumer might contain an E-mail address index while replication hubs might contain only system indexes (that is indexes that cannot be deleted or modified as they are required for Directory Server to function properly and efficiently).

Through the use of separate indexes, you can ensure that each machine has indexes that are optimized for its role in the overall directory architecture.

Performance Enhancements

Directory Server incorporates enhancements in terms of:

Enhanced Update Performance

Enhanced Search Performance

Enhanced Replication Performance

Enhanced SSL Performance with Crypto Accelerator 1000 Board

Enhanced Update Performance

The update performance enhancements include the following:

Enhanced Search Performance

The search performance improvements include:

Enhanced Replication Performance

Previously master Directory Servers had to be connected via high-speed, low-latency networks with minimum connection speeds of 100Mb/second, for full MMR support which ruled out the possibility of MMR over WAN, but this is no longer the case. Now that Directory Server now supports MMR over WAN, geographical boundaries no longer constitute a stumbling block for multi-master replication.


Due to differences in protocol, multi-master replication over WAN is not compatible with releases of Directory Server prior to Directory Server 5.2. Therefore, in a multi-master replication over WAN configuration, all Directory Server instances separated by a WAN must be of the following version: Sun ONE Directory Server 5.2, or Sun Java Enterprise System Directory Server 5.2 2003Q4 or later.

To optimize the replication flow and reduce round-trip delay time, Directory Server now:

Enhanced SSL Performance with Crypto Accelerator 1000 Board

Directory Server supports the Sun Crypto Accelerator 1000 Board (on Sun SPARC® hardware only). This board speeds up the initial exchange of keys (i.e. not the bulk encryption itself) by performing specific SSL mathematical functions, leaving the system processor to focus on application processing, which may be useful in deployments where client applications repeatedly bind over SSL, search, and then unbind. It is worth noting that the Sun Crypto Accelerator 1000 Board is most effective if the clients that are establishing connections are doing so from different machines. For further detail on the Sun Crypto Accelerator 1000 Board see the Securing Connections With SSL section in the Directory Server Deployment Planning Guide.

Previous      Contents      Index      Next     

Part No: 817-7619-10.   Copyright 2005 Sun Microsystems, Inc. All rights reserved.