Tools For The Linux Access Gateway Service; A Few Performance Tips - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

Tool
netstat -a

8.4.2 Tools for the Linux Access Gateway Service

The Linux operating system has the following tools that can help you determine the cause of a
problem.
Tool
curl
netstat -a
tail -f
top
tcpdump

8.5 A Few Performance Tips

Caching: Use a high performance disk system for the cache directory, such as tempfs on
Linux.
You can improve the speed of adding files to cache and retrieving them from cache if you turn
off gathering cache statistics. Click Devices > Access Gateways > Edit > Advanced Options
and add the following command:
DiskCacheMonitorStats off
SSL Terminator: Install an SSL terminator between the browsers and the Access Gateway.
This reduces the amount of rewriting required when the browsers are using SSL and the Web
servers protected by the Access Gateway aren't configured for SSL.
Click Devices > Access Gateways > Edit > Reverse Proxy / Authentication. Enable the Behind
Third Party SSL Terminator option.
SSL Cipher Suites: Use the advanced options from Apache to set the cipher suites that you
want to allow. Some cipher suites take longer than others to process.
For more information, see
mod_ssl.html#sslciphersuite).
Statistics: If additional performance is desired and statistics are not important, you can unload
the module. If you unload the
mod_status
also not gathered.
Description
Use this command to view statistics about the listeners on the
Access Gateway.
Description
Use this command to view identity provider metadata from the
Linux Access Gateway. See
Access the Metadata" in the
Identity Server Guide.
Use this command to view statistics about the listeners on the
Access Gateway.
Use this command to view real time activity in key log files. For
information on useful files to tail, see
Gateway Service Log Files," on page
Use this command to check resources available on the system.
Use this command to capture data on standard and loopback
interfaces and to view SSL data with imported keys.
"SSLCipherSuite Directive" (http://httpd.apache.org/docs/2.2/mod/
mod_status
"Testing Whether the Provider Can
Novell Access Manager 3.1 SP2
Section 8.1.2, "The Access
246.
module, the extended information is
Troubleshooting the Access Gateway Service 253