AD FS 伺服器容量的計劃Planning for AD FS Server Capacity

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

注意

本主題提供 content 不會反映實際測試伺服器執行 Windows Server 2012 上執行。The content provided in this topic does not reflect actual testing that was performed on servers running Windows Server 2012 . 本主題會更新之後,已經執行所需的測試。This topic will be updated once the required testing has been performed.

容量的 Active Directory 同盟服務計劃 (AD FS) 預測使用高峰同盟服務,並計劃的程序,或 scaling\ 接 AD FS 伺服器部署符合這些載入需求。Capacity planning for Active Directory Federation Services (AD FS) is the process of forecasting peak usage periods for your Federation Service and planning or scaling-up your AD FS server deployment to meet those load requirements.

本章節描述部署指導方針聯盟伺服器和聯盟 proxy 伺服器的角色,並根據實驗室測試 AD FS product 團隊,Microsoft 執行。This section describes deployment guidelines for both the federation server and federation server proxy roles and is based on lab testing that was performed by the AD FS product team at Microsoft. 本文的目的是可協助您:The purpose of this content is to help you:

  • 仔細估計您組織的特定 AD FS 部署,例如 AD FS 伺服器數目的硬體需求。Closely estimate the hardware needs for your organization’s specific AD FS deployment, such as the number of AD FS servers.

  • 準確投影 sign\ 中要求,成長,計劃的預期的山峰使用量,並確保 AD FS 部署處理預期尖峰使用的功能。Accurately project the expected peak usage for sign-in requests, plan for growth, and ensure that your AD FS deployment is capable of handling that expected peak usage.

您繼續朗讀此容量計劃 content 之前,我們建議您先完成的工作順序下列兩個表格中所示。Before you proceed with reading this capacity planning content, we recommend that you first complete the tasks in the order shown in the following two tables. 在第一次,我們提供建議的工作,有助於連結提供這個容量規劃討論相關操作。In the first table, we provide links to recommended tasks that will help provide relevant context for this capacity planning discussion.

建議使用的工作Recommended task 描述Description 參考資料Reference
了解部署 AD FS 聯盟伺服器及聯盟的 proxy 伺服器的需求Understand the requirements for deploying AD FS federation servers and federation server proxies 檢視重要硬體與軟體需求必要部署聯盟伺服器及聯盟的 proxy 伺服器。Review important hardware and software requirements necessary for deploying federation server and federation server proxies. 答附錄審查 AD FS 需求Appendix A: Reviewing AD FS Requirements
選取 [AD FS,您將會在組織中部署設定資料庫類型Select the type of AD FS configuration database that you will deploy in your organization 您可以開始使用容量計劃的資料在本區段中之前,先將判斷 AD FS 設定資料庫類型部署,Windows 內部資料庫 (WID) 或結構化查詢語言 (SQL) 資料庫。Before you can begin using capacity planning data in this section, you first have to determine which AD FS configuration database type you will deploy, either Windows Internal Database (WID) or a Structured Query Language (SQL) database. AD FS 設定資料庫的角色;The Role of the AD FS Configuration Database;

AD FS 部署拓撲注意事項AD FS Deployment Topology Considerations
判斷拓撲配置,請使用 AD FS 設定資料庫選擇新的類型Determine the type of topology layout to use with your new AD FS configuration database selection 一旦您已經使用您的部署中認為 AD FS 設定資料庫的類型,您將需要考慮哪些部署拓撲最接近,您將需要位置聯盟伺服器和聯盟 proxy 伺服器 production 環境中。Once you have decided on the type of AD FS configuration database to use in your deployment, you will need to consider which deployment topology most closely matches where you will need to place federation servers and federation server proxies within your production environment. 判斷您 AD FS 部署拓撲Determine Your AD FS Deployment Topology
了解金鑰 AD FS 相關容量計劃的條款Understand key AD FS–related capacity planning terms 審查定義的常見容量計畫使用 AD FS 容量討論計劃的條款。Review the definitions of common capacity planning terms that are used throughout the AD FS capacity planning discussion. 查看一節AD FS 容量計劃的條款本主題See the section titled AD FS capacity planning terms in this topic

之後您已經檢視 content 上表,您現在可以完成下一個表格必要的工作。Once you have reviewed the content in the previous table, you can now complete the prerequisite tasks in the next table.

必要條件工作Prerequisite task 描述Description 參考資料Reference
下載 AD FS 容量計畫縮放試算表Download the AD FS Capacity Planning Sizing Spreadsheet AD FS 容量規劃縮放試算表可協助您判斷聯盟伺服器 AD FS 聯盟伺服器發電廠部署所需的數目。The AD FS Capacity Planning Sizing spreadsheet can help you to determine the number of federation servers required for an AD FS federation server farm deployment. 如何使用這個試算表指示可用的中的下一步的工作如下所提供的連結。Instructions for how to use this spreadsheet are available in the link provided below for the next task. AD FS 容量計劃試算表AD FS Capacity Planning Spreadsheet
收集會需要單一 sign\ 上 (SSO) 存取目標 claims\ 感知應用程式和預期的使用高峰相關的存取權的使用者的資料Gather data about the number of users who will require single sign-on (SSO) access to the target claims-aware application and the expected peak usage periods associated with this access 收集此使用者資料將用於輸入操作 AD FS 容量規劃縮放試算表中所需的值。This user data you collect will be used for the input values required within the context of the AD FS Capacity Planning Sizing Spreadsheet. 估計聯盟伺服器,您的組織數目Estimate the number of federation servers for your organization
AD FS 容量計劃試算表適用於 Windows Server 2016AD FS Capacity Planning Spreadsheet for Windows Server 2016 Windows Server 2016 的更新的規劃工作表Updated Planning worksheet for Windows Server 2016 AD FS Windows Server 2016 容量計劃AD FS Windows Server 2016 Capacity Planning

AD FS 容量計劃的條款AD FS capacity planning terms

下表描述這個容量計劃 AD FS 設計指南一節中常使用的重要條款。The following table describes important terms that are used often in this capacity planning section of the AD FS Design Guide. AD FS 條款的完整清單,請查看了解主要 AD FS 概念For a more complete list of AD FS terms, see Understanding Key AD FS Concepts.

詞彙Term 解析度Definition
使用者人數Concurrent users 估計的使用者,都必須在一段指定時間,通常是澳地區的山峰活動時間提交要求服務數目。The estimated number of users that are expected to submit requests to the service within a given period of time, usually a peak activity period.
作用中的使用者Active users 大約平均數目系統,但不是一定提交在一段指定時間的要求上的作用中的使用者。The approximate average number of users that are active on a system, but not necessarily submitting requests, during a given period of time.
定義的使用者Defined users 理論上最大的使用者計數,通常為基礎的使用者有定義帳號,在系統中。A theoretical maximum user count, usually based on the number of users who have defined accounts in the system.
要求秒Requests per second 數字可能用提交的要求 \(時談論載入 system\ 上)或處理伺服器 \(時談論伺服器 throughput\)在第二個。The number of requests either submitted by clients (when talking about the load on a system) or processed by servers (when talking about server throughput) in a second. 這個度量用規劃伺服器的處理器和的記憶體容量。This metric is used in planning server processor and memory capacity.
目標伺服器的回應速度與使用量Target server responsiveness and utilization 繫結的範圍可接受伺服器效能計量成功。Success metrics that bound the acceptable server performance range. 通常,若的回應性低於或使用量超過目標,系統會被視為多載,而是必要的更多的容量。Generally, if responsiveness goes below or utilization goes above the target, the system is considered to be overloaded and more capacity is required.
Windows 內部資料庫 (WID)Windows Internal Database (WID) 可使用另一種 SQL Server 中某些 AD FS 部署預設 AD FS 設定資料庫。The default AD FS configuration database that can be used as an alternative to SQL Server in certain AD FS deployments.

AD FS 測試期間所使用的設定環境Configuration environment used during AD FS testing

本節設定環境的 AD FS product 小組用來執行它測試。This section describes the configuration environment that the AD FS product team used to perform its tests. 小組效能和延展性測試聯盟 server 的資料收集,使用下列電腦的硬體、軟體和網路設定:The team used the following computer hardware, software, and network configuration to gather performance and scalability data in tests of the federation server:

  • 雙重 Quad Core 2.27 gigahertz (GHz) (8 cores)Dual Quad Core 2.27 gigahertz (GHz) (8 cores)

  • 16\ GB 的 RAM16-GB RAM

  • Windows Server 2008 R2、企業版Windows Server 2008 R2, Enterprise Edition

  • Gigabit 網路Gigabit Network

注意

16 GB 的 ram 測試期間聯盟伺服器上使用,雖然中等更多記憶體大小,例如為 4 GB 的每個聯盟伺服器可用於大多數 AD FS 部署。Although 16 GB’s of RAM was used on the federation server during testing, a more moderate memory size, such as 4 GB’s of RAM per federation server can be used for most AD FS deployments. 在這個 AD FS 容量計劃網頁結果提供 AD FS 容量規劃試算表和為基礎的每個聯盟伺服器會使用約假設提供建議 4 GB 的 RAM 的大多數 AD FS production 環境。The recommendations that are provided in this AD FS Capacity Planning content along with the results provided by the AD FS Capacity Planning Spreadsheet are based on assumptions that each federation server will use approximately 4GB’s of RAM for most AD FS production environments.

Product 小組聯盟伺服器 proxy 測試收集效能和延展性資料用於下列設定:The product team used the following configuration to gather performance and scalability data for the federation server proxy testing:

  • 雙重 Quad Core 2.24 GHz (4 cores)Dual Quad Core 2.24 GHz (4 cores)

  • 4\ GB 的 RAM4-GB RAM

  • Windows Server 2008 R2、企業版Windows Server 2008 R2, Enterprise Edition

  • Gigabit 網路Gigabit Network

注意

AD FS 伺服器容量建議可以根據您選擇的特定環境中使用的硬體及網路設定的規格大幅,而有所不同。Capacity recommendations for AD FS servers can vary considerably, depending on the specifications you choose for the hardware and network configuration to be used in a given environment. 點參考資料,以提供本文中的縮放指南根據使用量目標 80%前面所提到的電腦上。As a point of reference, the sizing guidance provided in this content is based on a utilization target of 80 percent on the computers mentioned earlier.

AD FS 測量伺服器容量Measure AD FS server capacity

通常會影響伺服器的效能與擴充性的硬體元件的 CPU、記憶體、磁碟、和網路介面卡。Typically, the hardware components that affect server performance and scalability are the CPU, memory, the disk, and network adapters. 幸好,每個元件 AD FS 需要很少的記憶體和磁碟空間需求。Fortunately, each of the AD FS components requires very little demand on memory and disk space. 網路連接是那裏的需求。Network connectivity is an obvious requirement. 因此,聯盟伺服器聯盟的 proxy 伺服器上所執行的測試專注在衡量伺服器容量的兩個主要區域:Therefore, load tests that are performed on federation servers and federation server proxies concentrate on two primary areas for measuring server capacity:

  • 尖峰秒 AD FS 要求: sign\ 中要求處理秒聯盟伺服器上的數字。Peak AD FS requests per second: The number of sign-in requests that are processed per second on federation servers. 這個度量單位可協助您判斷多少同時使用者可以登入指定的伺服器。This measurement can help you determine how many simultaneous users can sign in to a given server. 了解這個度量單位效果效能,您可以搭配 CPU 消耗度量單位使用這個度量單位。You can use this measurement in conjunction with the CPU consumption measurement to understand this measurement's effect on performance.

  • CPU 消耗:百分比的 cpu 測量容量。CPU consumption: The percentage by which CPU capacity is measured. 這個度量單位可協助您判斷發生整體 CPU 載入根據秒的傳入 sign\ 中要求數目。This measurement can help you determine the overall CPU load that occurred based on the number of incoming sign-in requests per second.

繼續朗讀 AD FS 容量計劃有關更多Continue reading more about AD FS capacity planning

您已經完成的必要條件工作,並具有熟悉相關的條款和硬體需求之後,您可以使用下列其他容量計畫 content 可協助您判斷您的部署所需的 AD FS 伺服器數目建議:After you have completed the prerequisite tasks and have become familiar with related terms and hardware requirements, you can use the following additional capacity planning content to help you determine the recommended number of AD FS servers required for your deployment:

也了See Also

Windows Server 2012 中的 AD FS 設計指南AD FS Design Guide in Windows Server 2012