Credential Provider Benchmark Report

This document presents measured results of performance and load testing, performed in a CyberArk PAS lab environment that implements CyberArk’s Credential Providers common usage.

Benchmarks environment

Our benchmark testing was performed within a basic customer-like environment, which includes the Vault, PVWA, and Credential Providers.

Tested components

The following components were used in the performance testing environment:

  • 1 CyberArk Digital Vault v10.10.6

  • 1 CyberArk PVWA v10.10.6 ·

  • 1 CyberArk Credential Providers v12.1

This benchmarks test measures only the Credential Providers’ performance.

Server specifications

Component

OS

Hardware Details

Hardware Type

Credential Providers

Red Hat Enterprise Linux 7.9 64bit

  • CPUs: 32

  • CPU model: Intel® Xeon® Gold 6138 CPU @ 2.00GHz

  • Memory: 32 GB

  • Kernel: 3.10.0-1160.el7.x86_64

  • Virtualization: Vmware ESXi, 6.5.0, 10719125

Virtual machine

Tested CyberArk configuration

The following configurations were tested:

Component

Version

Configuration

Vault

v10.10.6

  • 16 Account in the Vault stored in one Safe.

  • 1 Application in the Vault with IP authentication method.

Credential Providers

v12.1

  • Cache mode ‘Persistent’

  • Owner on one Safe

  • Refresh cache – 15 minutes

  • Java Password SDK

  • 1 Application

  • 16 Account stored in cache

  • MaxConcurrentRequests = 40

Test flow

Each request was done by performing a GetPassword query on an object sent to the Credential Providers, using the Java Password SDK.

Benchmark results and conclusions

This section describes the results collected from load tests as per the configurations listed in the Tested CyberArk Configuration section.

Number of threads

Requests handled by CP Per Second

Average Response Time (ms)

Min Response Time (ms)

Max Response Time (ms)

CPU Usage (vCPU)

Percentage of failed requests

200

187

40

26

426

0.7

0

300

276

41

26

535

0.9

0

350

279

53

26

612

1.1

0

400

241

629

28

1764

1.0

0

Conclusion

According to the results measured, we conclude that Credential Provider can handle up to 279 requests per second.

Disclaimer: This result is relevant only for the configuration mentioned in this document.