Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-9452

Add new cached authorizer:change the dim of cache

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      Same like issues https://issues.apache.org/jira/browse/KAFKA-5261 ,

      We met the same performance issue which is descripted in the pr #3756 in our production environment,hence, we make a revision for the mechamisum of authorization, our revision have such optimizations

      1、Build a cache for authorization, which can avoid recomputation of authorization result. The authorization result will fetch on the result catch if the same result has been computed rather than compute it again
      2、Differ from the pr 3756, when we build the result cache of the authorization, we take the resource into first consideration. In this way, the authorization is recomputed only when the authorization are change of specific resource. Compared to the the frequency of recomputation can be reduced obviously.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              StevenLu Steven Lu
              Reviewer:
              Manikumar
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: