Comment on page
SCEPman depends mainly on the CPU resources. Memory and disc are less important.
A SCEPman 2.5 instance in one Azure P1V2 App Service Plan (210 ACUs) can serve around 2000 requests per minute under usual conditions. SCEPman 2.4 and earlier served about 400 requests per minute on one S1 App Service Plan (100 ACUs). Requests are
- SCEP issuing requests and
- OCSP requests.
The load for your SCEPman service has several dependencies and varies in the different environments. Important dependencies are:
- 1.Distribution of requests
- 2.Frequency of logins to network resources
- 3.Frequency of certificate requests/renewals
Especially the distribution of the requests has a high importance. If all clients do requests at the same time, your SCEPman instances get heavy load.
Please do not assign SCEP profiles to a large number of users devices at once, since this may result in a request-peak at your SCEPman instances.
We recommend the following sizing in Azure Compute Units (ACU) for the Azure App Service Plans as a starting point:
Every environment has its own load distribution over the day. In many environments the morning (start of work) generates a peak in terms of load at your SCEPman.
You can adapt the computing power for your App Service to your individual daily load distribution with the Azure App Service Scale Out features. E.g. you could define 2 x S1 in the morning from 08:00-10:00 to cover the morning peak, while you reduce to 1 x S1 for the rest of the day.
If you are able to predict your load well (e.g. derived from load history), we recommend Manual Scale over Auto Scale, since Auto Scale has to behave lazy (hysteresis) to prevent flapping between scales.