Keycloak performance

[hnhai]

• I'm install Keycloak 18.0.2 by Docker (Server 8 CPU, 16Gb ram) connect to PostgresDB in another Sever
• LoadTest By Jmeter call to rest api of Keycloak to get Jwt token (1000 CCUs, duration: 3 minutes)
• Keycloak used almost 8 core, response very slow. Start from miliseconds but increment to 30 seconds.
  It is normal ? How I can fix it ? Thanks

[hmlnarik]

Please provide more detailed description of your scenarios and deployment setup.

[hmlnarik]

Which "API login" endpoint does the test call?
Do all the "1000 threads" hit the same single server at the same time?

[hnhai]

@hmlnarik

Which "API login" endpoint does the test call?
This API: /realms/realm_name/protocol/openid-connect/token

Do all the "1000 threads" hit the same single server at the same time?
Yes

[hnhai]

Hi @hmlnarik do you have any recomend ?

[hmlnarik]

• "Username and password" seems to point to resource owner grant flow. This is relies on hashing the passwords which is intentionally CPU-intensive, this requirement being independent of IAM implementation, Keycloak or other. However in real-world scenario, it is more likely that the users reuse their established sessions rather than reauthenticating with every request.
• 1000 simultaneous threads means lots of context switching (OS-dependent, Keycloak independent), and that applies to the load driver as well.
• There was no mention of Keycloak being warmed up before the benchmark actually starts. Is there any warm-up time for JVM?

In total, I am afraid that the setup does not reflect realistic scenarios. Consider checking keycloak-benchmark project for assessing the resources needed to achieve the throughput for your requirements.

[hnhai]

@hmlnarik I got it. Thank for your help