See additional Authentication Proxy performance recommendations in the Duo Authentication Proxy Reference. We recommend a system with at least 1 CPU, 200 MB disk space, and 4 GB RAM (although 1 GB RAM is usually sufficient). The Duo Authentication Proxy can be installed on a physical or virtual host.
#SUDO UNABLE TO RESOLVE HOST WINDOWS 10 INSTALL#
If you will reuse an existing Duo Authentication Proxy server for this new application, you can skip the install steps and go to Configure the Proxy. The Duo End of Sale, Last Date of Support, and End of Life Policy states that Duo does not offer support for integrations running on operating system versions beyond the vendor’s stated Last Date of Support date.
#SUDO UNABLE TO RESOLVE HOST WINDOWS 10 WINDOWS#
Windows Server 2012 or later (Server 2016+ recommended).We recommend the following operating systems for the system hosting the Duo Authentication Proxy: The Authentication Proxy does not natively support load balancing and treats each load balancer node as a standard client/server, so the authentication rate does not change for an individual Duo proxy server. Newer CPUs generally improve the authentication, but adding more CPU cores does not improve performance due to the single-threaded nature of Python.Ĭonsider using load balancers when your expected authentication rates exceed the maximum stated for your Authentication Proxy operating system and your intended authentication configuration. If you suspect performance issues then check your single-core CPU usage and consider horizontal scaling if this core usage is high. The Authentication Proxy processes are mostly CPU-bound. We encourage you to balance security with performance and not opt for less-secure authentication configurations (such as plain LDAP without TLS) to gain a performance boost. The Authentication Proxy performance testing used Amazon Web Services (AWS) m4(Intel(R) Xeon(R) CPU E5-2686 v4) instances. For example, the effective authentication rates for various combinations on a Linux server will be: Linux Proxy Configuration
Note that use of LDAP or TLS on Linux decreases the authentication rate by 250 auths/minute on each side. Use this guidance as you design your Authentication Proxy server deployment. Installation Authentication Proxy Performance Recommendations
In addition to providing two-factor authentication, the Duo Authentication Proxy is a required component for importing Active Directory or OpenLDAP users into Duo via sync, Active Directory authentication for Duo Single Sign-On, and can also act as an HTTP proxy itself for other systems that also need to contact Duo's cloud service. If your organization requires IP-based rules, please review this Duo KB article. Firewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability. The Authentication Proxy communicates with Duo's service on TCP port 443.
0 kommentar(er)
