Based on the available documentation, here are the performance benchmarks and recommendations for PDP performance testing: Performance Benchmarks Salt Security achieved sub-20ms latency while handling thousands of authorization requests per second by running local PDPs within their infrastructure (1) . They extensively tested and measured performance, achieving sub-millisecond response times even under high load . With proper optimizations, you can expect several thousand RPS with less than 10ms latency per request (2) . System Requirements For starting values: • ​*CPU*​: ~200 mcores with upper limit of at least ~1000 mcores to enable short CPU spikes • ​*Memory*​: ~512Mb as a baseline For memory scaling, use the formula: ​*# of policy objects X 6kb*​ (where policy objects include users, resource instances & tenants) . For example, an environment with 100k users, 500k resource instances and 100 tenants would need ~3.5Gb of memory . Performance Optimization Tips To achieve high throughput and low latency : • Deploy the PDP in the same VPC as your application to minimize network latency • Disable decision debug information in production by adding

--env PDP_DEBUG=False

• Optimize base policy for your specific use case (disabling unused features like ReBAC checks can speed up execution) Caching Configuration The PDP includes a configurable caching mechanism that significantly improves performance by reducing redundant policy evaluations (3) . The cache supports: •

/allowed

•

/allowed/bulk

•

/user-permissions

•

/authorized_users

You can configure the cache to use either in-memory storage for single instances or Redis for distributed caching across multiple PDP instances . Scaling Strategies For horizontal scaling (2) : • Deploy multiple PDP instances behind a load balancer when CPU becomes a bottleneck • For multi-tenant environments, use tenant-based sharding for data/memory scaling

To learn more, see the sources I considered: [[1] Salt Security: Enterprise-Grade API Security with Fine-Grained Authorization](https://www.permit.io/blog/salt-security-enterprise-grade-api-security-with-fine-grained-authorization) [[2] Deploy Permit to Production](https://docs.permit.io/how-to/deploy/deploy-to-production) [[3] Permit's PDP (Policy Decision Point)](https://docs.permit.io/concepts/pdp/overview)