Configure OneSpan Authentication Server for performance

OneSpan Authentication Server uses the following settings to configure processing capacity:

• Number of OneSpan Authentication Server worker threads
• Maximum number of database connections
• Maximum number of audit database connections

To achieve the best results, the worker threads and maximum database connections should be set to the same value—the smaller value defines the effective server capacity. Setting one value higher will add an overhead cost, but not provide any benefit. For the maximum number of audit database connections, using two-thirds of the maximum database connections will yield best results when performing authentication only, four-fifths when processing administrative commands.

For more information about configuring worker threads, maximum database connections, and maximum audit database connections,

For the tested hardware, the optimum configuration is as follows:

Table: Performance test configuration (Deployment A, maximum capacity)

Configuration	Worker threads	Max. database connections	Max. audit database connections
OTP authentication	15	15	10
Administrative commands	25	25	20

Table: Performance test configuration (Deployment B, maximum capacity)

Configuration	Worker threads	Max. database connections	Max. audit database connections
OTP authentication	55	55	35
Administrative commands	90	90	70

For best maximum capacity and smallest server response times, these parameters need to be adjusted to the hardware and database vendor used. More performant components are better utilized when using higher values. Note that the maximum database connections together with the maximum audit database connections must not exceed any database vendor–specific limits.

If your database size exceeds 20,000 user accounts and authenticator records, we recommend to have bulk administration and report generation handled by a separate instance, either a backup server or a dedicated server.