IIS Server Security - NTLM authentication performance

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2007 > NTLM authentication performance





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author NTLM authentication performance
Georgy Malyshev

2007-03-15, 1:28 pm

Hello, All!

I'm using integrated Windows security for authentication purposes and made
some performance tests.
In ISAPI filter I start the timer on event "headers preprocessed" and stop
it in my ISAPI extension in
the entry to HttpExtensionProc.

I have HTTP keep-alive enabled and don't worry so much about first HTPP
request timing but repetitive
calls in the context of the same session are very important to me.

If I use anonymous authentication IIS overhead is neglectable and it's about
0.1-0.2 milliseconds.
However when I turn off anonymous and turn on NTLM the request propagates
through IIS in 8-15
milliseconds and sometimes it takes even 25-30 milli. Once again, first
requests propagates in 80-100
milli due to challenge-response negotiations but that's fine with me.

Everything is happening on LAN.

I'm not an expert in NTLM internals and I wonder if such an overhead is
normal or something can be
adjusted. I've played with AuthPersistence flag without any success.

With best regards, Georgy Malyshev.


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com