[KAFKA-9452] Add new cached authorizer:change the dim of cache

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Flags: Patch, Important
• External issue URL: https://github.com/apache/kafka/pull/7661
• Assignee: Unassigned
• Reporter: Steven Lu
• Reviewer: Manikumar
• Created: 18/Jan/20 09:10
• Updated: 18/Jan/20 09:10

Description

Same like issues https://issues.apache.org/jira/browse/KAFKA-5261 ,

We met the same performance issue which is descripted in the pr #3756 in our production environment,hence, we make a revision for the mechamisum of authorization, our revision have such optimizations

1、Build a cache for authorization, which can avoid recomputation of authorization result. The authorization result will fetch on the result catch if the same result has been computed rather than compute it again
2、Differ from the pr 3756, when we build the result cache of the authorization, we take the resource into first consideration. In this way, the authorization is recomputed only when the authorization are change of specific resource. Compared to the the frequency of recomputation can be reduced obviously.