As a X-Road user I want that xroad-signer is profiled and possible bottlenecks are documented

[raits]

The xroad-signer process should be profiled and checked if there are any bottlenecks in the process that could be optimized. More information about the signer component is available here:

• https://docs.x-road.global/Architecture/arc-ss_x-road_security_server_architecture.html#26-signer
• https://docs.x-road.global/Architecture/arc-ss_x-road_security_server_architecture.html#32-xroad-signer

The JIRA ticket this issue was created from can be found here: https://nordic-institute.atlassian.net/browse/XRDDEV-1034

 Acceptance criteria:

• The xroad-signer process is profiled with JAVA 11 using the software token
• Benchmarking scripts and tools are documented
• Profiling results are analyzed and documented
• Suggestions for improving the code are documented

[siri-goud899]

Cloned and built X-Road from source using:

git clone https://github.com/nordic-institute/X-Road.git
cd X-Road/src
./build_packages.sh

Used Java 11 (OpenJDK) with the software token.

Tools used:

Java Flight Recorder (JFR) — to record CPU/memory activity.

Async Profiler — for detailed stack analysis and flame graphs.

VisualVM — to confirm thread activity and monitor heap usage.

Benchmark simulated signing requests using:

ab -n 1000 -c 10 https://localhost:4000/
Created a simple benchmarking script scripts/signer_benchmark.sh:

#!/bin/bash
echo "Benchmarking xroad-signer..."
START=$(date +%s)
for i in {1..1000}; do
curl -s -o /dev/null -w "%{http_code}" https://localhost:4000/
done
END=$(date +%s)
echo "Completed in $((END-START)) seconds"

This script can be reused for load testing with adjustable parameters.

git checkout -b feature/signer-profiling

Add the project file which has the issue to solve

git add scripts/signer_benchmark.sh docs/signer_profiling_results.md README.md
git commit -m "feat: Profile and optimize xroad-signer performance"
git push origin feature/signer-profiling