I m currently trying to build out an identity and access con

Question

I m currently trying to build out an identity and access control stack based on ory s software in AWS Elastic Containers Service one thing that I need to specify while defining containers is the memory and CPU resources to allocate to each container What kind of resource requirements does Kratos have what CPU amp memory limits make sense for it Tried searching the docs but didn t come up with any specific answers

bright-hospital-14565 · Answer

Probably relevant here I d like to use argon2 as the hasher

bright-hospital-14565 · Answer

it looks like that has memory settings so I imagine it s a good idea to give kratos enough resource so that you can configure argon2 to be fairly secure

damp-sunset-69236 · Answer

Hello Have you checked <https www ory sh choose recommended argon2 parameters password hashing |this blogpost> about argon setup

damp-sunset-69236 · Answer

Usually 1Gb of RAM is enough for Kratos for startups It depends on requests per second

bright-hospital-14565 · Answer

I have Super useful slightly smiling face

bright-hospital-14565 · Answer

Nice 1GB is pretty slim what kind of CPU resources do you recommend This is all cloud hosting so I m trying to figure out a good value for of vCPUs

bright-hospital-14565 · Answer

ATM I ve just set it to 2 but am I better off with a different amount

damp-sunset-69236 · Answer

I think that 2vcpu is more than enough but remember to configure observability tools and get CPU RAM metrics against the cluster It ll be easier for you to troubleshoot issues in case of a lack of resources

bright-hospital-14565 · Answer

Yea that s good advice thanks slightly smiling face

bright-hospital-14565 · Answer

Can Kratos scale behind a load balanacer if I set up load balancing and scaling

bright-hospital-14565 · Answer

Since I m doing this in ECS I already need a load balancer anyway slightly smiling face

damp-sunset-69236 · Answer

Kratos can scale but AFAIK we don t have any configuration options available for AWS You can implement it by yourself You can easily spin up another container

bright-hospital-14565 · Answer

Nice

damp-sunset-69236 · Answer

Kratos feels good on AWS with RDS as storage for the identities and APi requests can be handled without any issues since Kratos is stateless

bright-hospital-14565 · Answer

Excellent yea it should scale fine with my setup then I m looking at using RDS as you mentioned slightly smiling face

damp-sunset-69236 · Answer

I started with 0 5 CPU and 512 ram using k8s and Kratos worked fine Later we added more resources but it depends on load average

bright-hospital-14565 · Answer

Yea I guess there is probably a sweet spot where it scales best but it ll probably just take some dialing in to find