Capacity Planning Guide
Introduction
This document describes capacity planning requirements per module for the BeyondInsight and Password Safe solutions by BeyondTrust. This document considers each module operating independently and considers scalability, throughput, and storage requirements in an average deployment. Assumptions for the environment are documented below and do not consider product interaction between modules nor the cumulative effect for operating multiple modules on the same asset and by multiple users simultaneously. It is reasonable to assume the results are additive in these situations for capacity planning purposes due to the number of permutations possible. Therefore, when more than one module is used for capacity planning, sum the requirements, except when specifications are for maximums use the lowest value, and consider that resources should be for peak loads as well as potential sustained utilization.
U-Series Appliance (virtual)
- Real-world appliance specs depend on what is selected when deploying the image (Getting Started with U-Series Appliance)
- For the purposes of this document we assume the minimum specs for the virtual appliance are applicable:
- 2 cores
- 2 CPUs
- 32 GB RAM
- All these data points assume that data retention values remain at the defaults. Keeping data for longer increases data volumes and can negatively impact system performance.
- Factors that may limit performance in a real-world deployment include:
- non-performant network/dns infrastructure
- poorly configured smart rules
- poorly configured password cache
- too many appliances talking to a single SQL server
- excessive scan frequency/scope
- Factors that may improve performance in a real-world deployment include:
- Active/Active deployment and use of external SQL
BeyondInsight
| Metric/Deployment Model | U-Series Virtual Appliance |
|---|---|
| Max Active Assets | 40,000 |
| Max # Concurrent logged in users | 50 |
| Max Smart Rules | 1500 |
| Max Daily Events (EPM, Password Rotation, Scanning etc) | 500,000 |
Analytics & Reporting (cube)
| Metric/Deployment Model | U-Series Virtual Appliance |
|---|---|
| Max number of subscriptions | 200 |
| Average Time to Complete the Daily Job | 90 mins |
Password Safe
| Metric/Deployment Model | U-Series Virtual Appliance |
|---|---|
| Max Managed Accounts | 50,000 |
| Max Daily Password Rotations | 5,000 |
| Max Concurrent Sessions - RDP | 300 |
| Max Concurrent Sessions - SSH | 600 |
| Max Managed Systems | 50,000 |
Endpoint Privilege Management
| Metric/Deployment Model | U-Series Virtual Appliance |
|---|---|
| Max Endpoints | 5,000 |
Database growth
Password Change
- Each change: 8KB
- Example: 100k password changes per year = 800MB
Requests
- Per request: 0.25KB
- Per approval: 0.13KB
- Per session recording: 0.35KB
- Example: (assume session length of 2 hours in 18 hr working day = 9 sessions per concurrent user per day x 100 concurrent users = 900 sessions per day)
- 900 x 0.73KB = 0.67MB per day for requests with approvals
- 900 x 0.6KB = 0.54MB per day for auto-approved requests
Session Recording Files
- These calculations are based on single monitor, with screen resolution of 1600 x 1200, more detailed screen resolution or multiple monitors will increase the file size on disk
- RDP session file (on disk): ~350KB per minute of recording
- SSH session file (on disk): ~25KB per minute of recording
- Example: (assume 900 sessions per day x 120 mins = 108,000 minutes of recording).
- SSH: 108,000 x 25KB = 2.7 GB per day
- RDP: 108,000 x 350KB = 37.8 GB per day
Updated about 2 hours ago
