HashiCorp Vault — Benchmarks
Scope
Performance characteristics, scaling limits, and resource consumption for HashiCorp Vault.
| Operation |
Single Node |
3-Node HA (Raft) |
Notes |
| KV read |
5,000-10,000 req/s |
5,000-8,000 req/s |
Read on leader |
| KV write |
2,000-5,000 req/s |
1,500-3,000 req/s |
Raft consensus overhead |
| PKI sign |
500-1,000 req/s |
400-800 req/s |
CPU-intensive |
| Transit encrypt |
3,000-7,000 req/s |
2,500-5,000 req/s |
AES-GCM |
| Token create |
2,000-5,000 req/s |
1,500-3,000 req/s |
Storage write |
Resource Sizing
| Deployment |
CPU |
Memory |
Storage |
Concurrent Clients |
| Dev |
1 |
1Gi |
10Gi |
< 50 |
| Small prod |
2 |
4Gi |
50Gi |
50-200 |
| Medium prod |
4 |
8Gi |
100Gi |
200-1,000 |
| Large prod |
8 |
16Gi+ |
500Gi |
1,000+ |
Scaling Limits
| Dimension |
Limit |
Notes |
| Active secrets |
1M+ |
Storage backend dependent |
| Secret engines |
1,000+ |
Impacts startup time |
| Policies |
10,000+ |
Policy evaluation < 1ms |
| Leases |
300,000 default |
max_lease_count tunable |
| Raft cluster |
5 voting nodes |
3-5 recommended |