[Feasibility] million of users, dozens of authentication / s
HI all,
I'm inquiring some advises, or experience testimonies about architectures having some applications delegating authentication to a LLNG with 1M to 2M users counting authentication spikes expected up to 75/sec.
Authenticating users would be done probably by choice: login/pwd with an openldap server or through a large scale OIDC IDP. Applications would be behind the LLNG handler.
On performance doc page of LLNG I read metric for 1000 sessions insertion/read and for some backends. In order to get a good understanding of this, should I consider session insertion like local authentication (id/pwd) and session read/search like 1000 handler URL hits ?
Moreover, reading the doc and discussing with community members, it seems that Nginx + uWSGI with a session backend like postgres or nosql look mandatory for such performance and volume. In the same way, to setup manager separately would be a good idea. Do you think the same ? Do you see other things that I should consider also ?
In terms of number of nodes load balanced by a haproxy, it's quite hard to really know how many would be necessary, do you know/have similar experience that you could share to assess the feasibility of such an architecture ?
Thanks.