System Center Configuration Manager 2007:

Transcription

1 System Center Cnfiguratin Manager 2007: Sample Cnfiguratins and Cmmn Perfrmance Related Questins Published: July 2008 Executive Summary This dcument is designed t prvide an verview f sample hardware cnfiguratins used in stress and scale testing fr different size envirnments. Additinally, it answers cmmn questins abut planning and cnfiguring fr ptimal perfrmance in Cnfiguratin Manager 2007.

2 Cntents Overview... 3 Testing fr a zer-day explit update scenari... 4 Testing Methdlgy:... 4 Hardware cnfiguratins used in testing: k Client (Single Cmputer) Cnfiguratin k Client Site (Dual Cmputer) Cnfiguratin k client site with separate management pints cnfigured in a netwrk lad balancing cluster and cnfigured t access a site database replica k client single site with 4 management pints cnfigured in a netwrk lad balancing cluster and cnfigured t access a site database replica k client hierarchy - central site with tw primary child sites Frequently asked questins: Hw shuld I cnfigure my SQL Server database, Cnfiguratin Manager 2007 (CnfigMgr) site installatin, and perating system hard disk strage fr ptimal perfrmance at the central site fr a large hierarchy? What abut a primary site with a large number clients assigned t it? Shuld I install SQL Server n the same cmputer used as the CnfigMgr central site server, r shuld I use a separate cmputer? Are there any imprtant cnfiguratin cnsideratins fr backup? Shuld I install Cnfiguratin Manager 2007 site system rles n a 64 bit perating system? Will this imprve perfrmance? Shuld I install SQL Server 64 bit editin n a 64 bit perating system instead f SQL Server 32 bit editin n a 32 bit perating system? Shuld I use Address Windwing Extensins (AWE) fr SQL Server bit editins? Shuld I cnfigure SQL Server t use a specific amunt f memry? Shuld I use Netwrk Lad balancing fr my management pints? Shuld I use a replicated SQL Server site database fr my management pints? Shuld I use netwrk lad balanced sftware update pints running Windws Server Update Services (WSUS)? Sample Cnfiguratins and Cmmn Perfrmance Related Questins 1

3 Hw can I trublesht perfrmance issues in Cnfiguratin Manager 2007?.. 17 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 2

4 Overview This dcument is designed t prvide an verview f sample hardware cnfiguratins used in stress and scale testing fr different size envirnments. Additinally, it answers cmmn questins abut planning and cnfiguring fr ptimal perfrmance in Cnfiguratin Manager Sample Cnfiguratins and Cmmn Perfrmance Related Questins 3

5 Testing fr a zer-day explit update scenari Testing Methdlgy: The primary gal f ur testing was t mdel the wrst-case scenari fr site system lad in a sftware update deplyment requiring the enterprise-wide deplyment f 10 security updates in a shrt perid f time. The fllwing assumptins exist in this case: All site systems rles are running 32-bit Windws Server 2003 Enterprise Editin SP2. Nte: While islated scenaris were tested, the cmplete end-t-end scenari described here was nt attempted using 64-bit Windws Server installatins. All required prerequisites were met fr site server and site system installatin, including SQL Server 2005 SP2 and Windws Server Update Services 3.0. All sites were cnfigured t perate in native mde using a Windws Server Certificate Authrity t prvide PKI services. It is estimated that native mde site peratins are 10-15% slwer in verall perfrmance as cmpared t sites cnfigured t perate in mixed mde. The settings fr all discvery methds, inventry, and ther client cmmunicatin traffic-generating items were left at installatin defaults. All site systems were cnnected using 1 Gigabit Ethernet netwrk cnnectins with n additinal netwrk traffic lad ther than Cnfiguratin Manager netwrk cmmunicatin. Scenaris invlving differing netwrk cmmunicatin speeds r lads were nt tested. T identify perfrmance characteristics fr large client lads in a simple hierarchy, the fllwing initial bject lads were generated fr the largest test envirnment f 200,000 managed clients (prprtinally sized lads were generated fr the smaller envirnments) cnsisting f ne central site and tw child primary sites f 100k each: 2140 cllectins 1000 packages 1000 prgrams 1000 advertisements 100 distributin pints 200 bundaries 1000 metering rules Sample Cnfiguratins and Cmmn Perfrmance Related Questins 4

6 200,000 full sftware inventry files 200,000 full hardware inventry files, including Asset Intelligence data 200,000 delta sftware inventry files 200,000 delta hardware inventry files 200,000 registratin discvery recrds 200,000 data discvery recrds During the zer-day explit scenari testing management pint, site server, and site database server perfrmance lads were generated using a single sftware update deplyment cnsisting f ten security updates that were deplyed t all 200,000 simulated clients in the envirnment. All clients successfully received and installed all ten sftware updates and reprted sftware updates cmpliance using state messages. Fr the test t be successful, all client sftware update installatin state messages had t be returned t the central site fr reprting within 24 hurs f the sftware update deplyment. During this time, the distributin f sftware update binaries t distributin pints, management pint creatin f client sftware update installatin plicies, client receipt f plicy t install thse updates, installatin f applicable updates by clients, and state message reprting f results fr the deplyment frm each client had t ccur. Distributin pint r generated netwrk lad related t dwnlad f applicable updates was nt mdeled and this scenari assumes that an adequate number f distributin pints and that sufficient netwrk bandwidth is available t accmmdate the demand. We did nt mdel the perfrmance fr a large, cmplicated Cnfiguratin Manager 2007 hierarchy during perfrmance testing. Keep in mind that additinal prcessing and netwrk verhead is generated as the number f sites increase. As a result, when designing a hierarchy cnsider reducing the number f primary sites t the minimum number pssible that will meet yur requirements. Hardware cnfiguratins used in testing: This sectin dcuments the hardware cnfiguratins used in testing each sized envirnment. Use this infrmatin nly as a general guide fr hardware selectin, as there are ther factrs that may affect perfrmance including available netwrk bandwidth and cnfiguratin and frequency f enabled feature usage. Nte: In this testing, the best practice f islating the perating system installatin, Sample Cnfiguratins and Cmmn Perfrmance Related Questins 5

7 CnfigMgr installatin and inbxes, SQL Server data files, SQL Server lg files,sql Server temp database, and VSS shadw cpy strage required fr backup peratins was nt fllwed fr all cnfiguratins in rder t represent envirnments with less available disk resurces and mre readily identify stressful activity. T achieve ptimal perfrmance, even in smaller envirnments detailed in this dcument, fllw the best practices fr hard disk vlume usage described in the larger scenaris f the 100K client primary site and 200k client central site. Sample Cnfiguratins and Cmmn Perfrmance Related Questins 6

8 10k Client (Single Cmputer) Cnfiguratin Site Server / management pint: 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 Operating System/SQL Server RAID 1 2 temp database 2 Cnfiguratin Manager 2007 installatin files and SQL Server site database RAID 1 2 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 7

9 25k Client Site (Dual Cmputer) Cnfiguratin Site Server: 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 Operating System RAID Cnfiguratin Manager RAID installatin files 3 SQL Server site database RAID10 4 Management pint: 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Sample Cnfiguratins and Cmmn Perfrmance Related Questins 8

10 Vlume Purpse RAID Type # f Disks 1 Operating System RAID Cnfiguratin Manager management pint cmpnent installatin files RAID 1 2 CnfigMgr 2007 Site Server hsting bth the CnfigMgr DB and the WSUS DB 1Gb E Management pint with a sftware update pint referencing the WSUS DB n the Site Server Figure 1 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 9

11 50k client site with separate management pints cnfigured in a netwrk lad balancing cluster and cnfigured t access a site database replica. Site Server: 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 Operating System RAID Cnfiguratin Manager RAID installatin files 3 SQL Server site database cnfigured fr site database replicatin RAID10 4 Management pints (x2): 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 Operating System/SQL RAID 1 2 Server temp database 2 Cnfiguratin Manager RAID installatin files 3 SQL Server site database replica RAID 10 4 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 10

12 CnfigMgr 2007 site server hsting bth the CnfigMgr DB and the Windws Server Update Services DB 1Gb E Tw netwrk lad balanced management pints als cnfigured as sftware update pints referencing the WSUS database lcated n the Site Server Figure 2 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 11

13 100k client single site with 4 management pints cnfigured in a netwrk lad balancing cluster and cnfigured t access a site database replica. This cnfiguratin details the recmmended hardware platfrm and site layut t supprt 100,000 clients assigned t a Cnfiguratin Manager 2007 site cnfigured t perate in native mde. In this cnfiguratin we see a high end server running the Cnfiguratin Manager 2007 site server rle as well as the Cnfiguratin Manager 2007 site database server which hsts the site and WSUS databases. The management pint site system rle is placed n fur mid range servers perating in an NLB cluster. The fur management pint servers are als hsting the WSUS web frnt end servers and the related sftware update pint site rles. Site Server: 4x2 Intel 2.66 GHz 16 GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 Operating System RAID SQL Server temp database RAID Cnfiguratin Manager 2007 RAID 10 4 installatin files 4 SQL Server data files RAID SQL Server lg files RAID SQL Server database replicatin distributin database RAID 1 2 Management pints (x4): 2x2 3 GHz 4GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID # f Disks Type 1 Operating System/SQL Server RAID 1 2 temp database 2 Cnfiguratin Manager 2007 RAID 1 2 installatin files 3 SQL Server database replicatin RAID 10 4 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 12

14 CnfigMgr 2007 site server hsting bth the CnfigMgr DB and the WSUS DB 1Gb E Fur netwrk lad balanced management pints with sftware update pints referencing the WSUS DB n the Site Server Figure 3 Sample Cnfiguratins and Cmmn Perfrmance Related Questins 13

15 200k client hierarchy - central site with tw primary child sites Site Server: 4x2 Intel 2.66 GHz 16 GB RAM SAS write back / read ahead cache (with battery backup) ptins fr all vlumes Vlume Purpse RAID Type # f Disks 1 SQL Server temprary database RAID Cnfiguratin Manager 2007 RAID 10 4 installatin files 3 SQL Server data files RAID SQL Server lg files RAID Operating System RAID 1 2 Management pints N management pints are used in this central site cnfiguratin. It is recmmended that clients are nt assigned t a central site when supprting client levels abve 100K s that the central site can prvide better availability and perfrmance fr centralized administratin, as well as the rllup and reprting f inventry, status, and cmpliance data. Instead, all clients shuld be assigned t child sites. Sample Cnfiguratins and Cmmn Perfrmance Related Questins 14

16 Frequently asked questins: Hw shuld I cnfigure my SQL Server database, Cnfiguratin Manager 2007 (CnfigMgr) site installatin, and perating system hard disk strage fr ptimal perfrmance at the central site fr a large hierarchy? What abut a primary site with a large number clients assigned t it? File I/O is usually the first bttleneck encuntered in a central r primary site fr a large hierarchy. Yu shuld design yur disk subsystem fr site server and site database server site system rles fr fault tlerance, then ensure that the primary cnsumers f I/O each get their wn channel t physical disk(s) in the disk subsystem. Review the fllwing tpic in the prduct dcumentatin fr mre infrmatin: Best Practices fr Central and Primary Site Hardware and Sftware Cnfiguratin ( Shuld I install SQL Server n the same cmputer used as the CnfigMgr central site server, r shuld I use a separate cmputer? As ppsed t guidance given fr Systems Management Server 2003 (SMS 2003), yu will generally achieve better verall perfrmance if SQL Server is hsted n a separate cmputer frm the Cnfiguratin Manager 2007 site server cmputer, prvided there is a high speed (1 Gbps r faster) cnnectin between the site server and the SQL server cmputers, and the cnnectin is dedicated fr this purpse. Fr a central site in a large (100,000 r mre managed cmputers) hierarchy, and/r an envirnment with frequent management activity and reprting, cnsider hsting the site database n a separate cmputer running SQL Server. Review the fllwing tpic in the prduct dcumentatin fr mre infrmatin: Perfrmance Cnsideratins When Designing Cnfiguratin Manager Sites ( Are there any imprtant cnfiguratin cnsideratins fr backup? CnfigMgr uses Vlume Shadw cpy Service (VSS) t create pint-in-time backups f site infrmatin and the SQL Server site database files. T d this, it uses a shadw cpy strage area t stre data. Nte this space is in additin t the space used by actual backup data created by the CnfigMgr backup task. T imprve perfrmance and prevent backup failures due t insufficient disk space, cnsider cnfiguring VSS t use a separate dedicated vlume n a separate I/O channel with sufficient disk space fr the shadw cpy strage area. Yu can use the vssadmin tl included with Windws Server 2003 r Windws Server 2008 t cnfigure this. Fr mre infrmatin n shadw cpy strage and vssadmin, see the fllwing: Event ID 4001 VSS Strage Space Availability ( Determining strage ptins fr shadw cpies ( Vssadmin ( Sample Cnfiguratins and Cmmn Perfrmance Related Questins 15

17 Shuld I install Cnfiguratin Manager 2007 site system rles n a 64 bit perating system? Will this imprve perfrmance? CnfigMgr is a native 32-bit applicatin and there is a slight perfrmance verhead when running 32- bit applicatins n 64-bit Windws in the WOW64 subsystem. In mst cases, hwever, this perfrmance difference is negligible. If yur rganizatin is adpting and standardizing n 64-bit Windws Server, perfrmance shuld be sufficient n adequately sized hardware in all but the mst extreme circumstances. Shuld I install SQL Server 64 bit editin n a 64 bit perating system instead f SQL Server 32 bit editin n a 32 bit perating system? SQL Server bit editin ffers advantages in physical memry addressability and the 64-bit capable perating system and hardware cmbinatin ffers mre scalability and better perfrmance. The mst prnunced advantage is due t the increase in addressable physical memry. SQL Server design attempts t minimize I/O peratins t the database n physical disk by using memry as buffer fr data pages. With larger memry (8GB r mre) cmputers perfrmance gains may be seen. The SQL Server site database fr a central site fr a large hierarchy with ver 100,000 clients, 64-bit SQL Server shuld be cnsidered as an ptin fr imprving current perfrmance, accmmdating anticipated grwth in the number f managed clients, increased frequency f management activities such as inventry cllectin, sftware distributin, sftware updates, r desired cnfiguratin management reprting. Having said all that, under mst lads we generated in testing, SQL Server bit perfrmance was nt significantly different frm the 32-bit versin with extended memry thrugh Address Windwing Extensins was available. Shuld I use Address Windwing Extensins (AWE) fr SQL Server bit editins? On cmputers with greater than 4 GB f physical memry running a 32-bit perating system, enabling Address Windwing Extensins (AWE) fr SQL Server allws it t map and unmap database pages directly t memry utside the user-mde virtual address space fr the SQL Server service. It des nt directly prvide fr mapping f ther bjects, such as users, threads, r queries utside SQL server s virtual address space. By prviding additinal memry fr buffering, physical I/O t the database files n disk can be reduced and will result in verall increased perfrmance. Shuld I cnfigure SQL Server t use a specific amunt f memry? In general, yu shuld use the default SQL Server autmatic memry cnfiguratin settings. In a situatin where a primary site server has extremely lw physical memry (2 GB r less), such as in a virtual PC envirnment used fr demnstratin purpses, yu may cnsider setting the SQL Server maximum memry setting t a lwer value t prevent ptential paging by the perating system. Fr example, n a cmputer used fr demnstratin purpses with nly 1GB r RAM yu culd set the SQL Server maximum memry ptin t 384MB, which wuld prvide a mre respnsive system if using a lcal administratr cnsle r ther applicatins. Shuld I use Netwrk Lad balancing fr my management pints? If yu have a site with mre than 25,000 active clients assigned t it, yu need t cnfigure tw r mre management pints behind an NLB. Fr each additinal 25,000 clients, yu shuld add anther management pint t the NLB cluster. Up t 100,000 clients assigned t a primary site are supprted using fur lad-balanced management pints. Sample Cnfiguratins and Cmmn Perfrmance Related Questins 16

18 Shuld I use a replicated SQL Server site database fr my management pints? If yu use an NLB cluster f management pints, yu shuld cnfigure them t use a SQL Server site database replica instead f the site database server directly. See the fllwing tpic fr mre infrmatin n using management pints cnfigured t perate in a netwrk lad balancing cluster accessing a site database replica: Perfrmance Cnfiguratin Recmmendatins ( Shuld I use netwrk lad balanced sftware update pints running Windws Server Update Services (WSUS)? Like the management pint site system rle, the sftware update pint site system rle supprts a maximum f 25,000 clients per cmputer. Yu must use an NLB f sftware update pints t supprt additinal clients in the same manner as the management pint. This means that yu must cnfigure WSUS n each cmputer in the NLB cluster, and then cnfigure them as sftware update pints. T cnfigure WSUS in an NLB cnfiguratin, please refer t the fllwing dcumentatin: Appendix C: Cnfigure WSUS fr Netwrk Lad Balancing ( 92b4c mspx) Hw can I trublesht perfrmance issues in Cnfiguratin Manager 2007? Check the prduct dcumentatin fr cmmn perfrmance issues and ptential slutins: Trubleshting Cnfiguratin Manager Perfrmance ( The infrmatin cntained in this dcument represents the current view f Micrsft Crpratin n the issues discussed as f the date f publicatin. Because Micrsft must respnd t changing market cnditins, it shuld nt be interpreted t be a cmmitment n the part f Micrsft, and Micrsft cannt guarantee the accuracy f any infrmatin presented after the date f publicatin. This white paper is fr infrmatinal purpses nly. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Cmplying with all applicable cpyright laws is the respnsibility f the user. Withut limiting the rights under cpyright, n part f this dcument may be reprduced, stred in, r intrduced int a retrieval system, r transmitted in any frm r by any means (electrnic, mechanical, phtcpying, recrding, r therwise), r fr any purpse, withut the express written permissin f Micrsft Crpratin. Micrsft may have patents, patent applicatins, trademarks, cpyrights, r ther intellectual prperty rights cvering subject matter in this dcument. Except as expressly prvided in any written license agreement frm Micrsft, the furnishing f this dcument des nt give yu any license t these patents, trademarks, cpyrights, r ther intellectual prperty Micrsft Crpratin. All rights reserved. Sample Cnfiguratins and Cmmn Perfrmance Related Questins 17