Peformance Turning for File Download / Upload with Enabled SharePoint Audit

Question

Greetings all, may I ask your help for Peformance Issues?
Background:
I tried to create a ASP.NET Web Page to download/upload/list SharePoint file and deployed to IIS website in same application server (will NOT use web part as some users are NOT allowed to direct access confidential workspace)
Besides, for Audit Log record purpose, the page will impersonate (without password) the logged in user:
SPUserToken userToken = web.AllUsers[user].UserToken;
SPSite s = new SPSite(siteStr, userToken);
For File Listing, the web service can provide fast response, and we are using service A/C for connection (as no auting for listing, but require audit for file download upload)
Several implemeation options tested for File Downloiad / Upload, but issues occured and finding listed below:
Issues
1) SharePoint Object Model
When I open Site (using new SPSite), it's too slow to respond. (under 1s for all operations, but require 10~50s for open SPSIte. e.g.
using(SPSite s = new SPSite(siteStr) //50s
How can I download/upload file without open SPSite object (using SharePoint object model, but user token should be kept to allow SHarePoint identifiy user actions. e.g. Updated by Tom, NOT system administrator)?
2) SharePoint default web service
For file download, I tried to use SharePoint Web Service for download file, it's quick but how can SharePoint record the audit log to downloaded user, and not service A/C? ( e.g. View by Tom, NOT system administrator)
With Windows SSO solution, please note system should NOT prompt to ask user password for use impersonation
3) HTTP Request API (for file download)
As mentioned in point 2, if the system cannot get password from user, SharePoint also recorded service A/C in audit log... ><
Thank you for your kine attention.
.NET Beginner 3.5

Answer 1

Thank you for prompt response, please find my reply with Underline:
Hi,
Maybe I'm not quite clear about the architecture you have now.
Is your asp.net application deployed in separate IIS site but in the same physical server as SharePoint?
Yes
"we are using service A/C for connection", can you please explain the 'A/C'?
Domain User, Local Admin and also SharePoint Service Admin A/C
Opening SPSite is relatively slower but shouldn't take 50 sec. However it depends on your server hardware configuration. You should meet the minimum hardware requirements for SharePoint.
Assigned double resources based on minimum hardware requirements.
For details, 50s is the load test result. But for other SharePoint operation, it takes around/under 3s reponse time.
Are you using SharePoint Audit log? Exactly If so then why don't you just put the hyperlink to the documents in your asp.net page. User maybe have to login once in SharePoint site but
it depends on your security architecture. For example if both of your sites in local intranet and you are using windows integrated authentication, SSO will work automatically  User is NOT allowed
to access SharePoint site/server (not implemented for sepreate server yet, as performance issues occured for
separate site in same server)  directly from Internet, the
middle server with web interface created for user request.
Whatever I understands gives me the feeling that you download the file using HTTPWebRequest C# class. However regarding security it depends on how authentication is setup in asp.net web site and in sharepoint. If both site uses windows integrated security
and they are in the same server, you can use the following code snippet:
using (WebClient webClient = new WebClient())
webClient.Credentials = System.Net.CredentialCache.DefaultNetworkCredentials;
webClient.DownloadFile("file ur in sharepoint", "download directory");
Thanks, will try and reply later
But still, as I've mentioned, not quite clear about the whole architecture.
A) Request Handling
1) User use browser to request file listing and/or download file (hereafter called: File Download Request) from custom ASP.NET page (Let's say In Server 1, IIS 1)
2) ASP.NET　page  or File Handler ashx (Server 1, IIS 1) call custom web service, SharePoint deault/OOTB web service or using SharePoint Object Model to access SharePoint Document Library (in Server 1,
IIS 2)
3) Both SharePoint and IIS Web Site
(Server 1, IIS 1 & IIS2) using the same service A/C
4) The web service , File Handler return file obeject to IIS1
5) IIS 1 reply File Download Request to user
B) Application Architecture (In testing environment)
1) no load balancing
2) 1 DB server (Server 2)
3) 1 Application Server (with IIS 1 - ASP.NET, IIS 2, SharePoint Web Site with default SharePoint Web Service, IIS 3 SharePoint Admin Site & IIS 4 Custom SharePoint Web Service)
4) Sepreate AD Server (Server 3)
Thanks,
Sohel Rana
http://ranaictiu-technicalblog.blogspot.com
.NET Beginner 3.5