Need information about limiting connections for one particular application

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

We would like to know whether there is any option to limit connections from 1 particular application. Also confirm whether using a separate HCO for that application and tweak it for lesser number of allowed connections will work or is there any other way to achieve this. update us if there is any possible performance impacts after doing this.

Environment

Release : 12.8

Component :

Resolution

We will not limit the number of connections coming from the agent and we do not have the option to control this.

You need to investigate why the agent was sending excessive number of connections.

You can set a HCO for this agent with reduced number of connections.

OOTB : 

Maximum Sockets Per Port	20
Minimum Sockets Per Port	2
New Socket Step	2
Request Timeout	60

You can try : 

Maximum Sockets Per Port	10
Minimum Sockets Per Port	1
New Socket Step	1
Request Timeout	60

But the above is simply per web server process.

If the web server is spawning multiple child process, this agent connections will accumulate at the policy server so you will then have to limit how many web server processes can be spawned (for example, apache child processes).

So - if you want to ensure the agent make only limited number of connections then you can try the configuration above and probably need to adjust more.