Based on the Apex One security agent traffic statistics, load testing was performed on Service Gateway to generate this guide.
This sizing data is for reference only. Traffic load may vary on different customer environments.
Test Scenarios
Table 1: Comparison Scenarios
| SCENARIO | PLATFORM | TEST ITEM | HARDWARE SPEC | PROTOCOL |
|---|---|---|---|---|
| 1 | ESXI 6.5 | 1000 Apex One security agent performing concurrent program upgrade from Service Gateway | 8vCPU/12G Mem/500G Disk/1000Mbps | HTTPS |
| 2 | ESXI 6.5 | 1000 Apex One security agent normal usage from Service Gateway | 8vCPU/12G Mem/500G Disk/1000Mbps | HTTPS |
Table 2: Concurrent connection for product request
| API | Apex One security agent number | IOT connections | Purpose |
|---|---|---|---|
| Concurrent connections (agents) | 1000 | 30000 | For hot fix downloading |
| Concurrent connections (agents) | 5000 | 30000 | Normal usage |
Test Results
| Firmware version | 2.0.7 (fresh install) | 2.0.7 (fresh install) | |
| Platform | ESXI 6.5 | ESXI 6.5 | |
| Hardware model | 8vCPU/12G Mem/500G/1000Mbps | 8vCPU/12G Mem/500G/1000Mbps | |
| Protocol | HTTPS | HTTPS | |
| Running status | 1000 Agent concurrent downloading hot fix | Normal usage | |
| Total Traffic Size | 157M*1000 | - | |
| Total Duration Time |
| 1800s | |
| Concurrent download session | 1000 | 500 | |
| Persistent IOT connection | 30000 persistent IOT connection | 30000 persistent IOT connection | |
| TPS | 61.93 sample/second | 89.17 | |
| Avg. CPU Usage | 34.62% | 8.18% | |
| Avg. Mem Usage | 66.7% | 51.52% | |
| Avg. Disk IO Usage | 1.97% | 6.91% | |
| Avg. Network Traffic | 95251.16 KB/second | 139.53 KB/second | |
| Avg. Network Usage | 100% | 0.16% |
"TPS" means transaction per second where T(transaction) means API request from an Apex One security agent.
In conclusion, one Service Gateway appliance can support at most 30000 Apex One security agents.
Persistent connections mainly consume memory resources. Main bottleneck would be the network bandwidth usage with concurrent program downloads from the security agents.