[OAK-10451] UserPrincipalProvider may cause many conflicts when under load

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.66.0
• Component/s: core, security
• Assignee: Unassigned
• Reporter: Nicola Scendoni
• Created: 21/Sep/23 10:22
• Updated: 11/Jul/24 03:31
• Resolved: 01/Jul/24 14:28

Description

UserPrincipalProvider can be configured to periodically cache group membership by writing group principals on a rep:cache node. This will result in thundering herd problem when the system is under load and the expiration time for the cache is reached. Incoming requests that authenticate concurrently will all try to refresh the cache and cause conflicts because each request tries to set a new expiration time that is slightly different from the others.

Issue Links

• incorporates: OAK-10471 Implement ConflictHandler for UserPrincipalProvider Cache
• is fixed by: OAK-10471 Implement ConflictHandler for UserPrincipalProvider Cache
• links to: GitHub Pull Request #1128

Sub-Tasks

• Benchmark results: Closed
• Benchmark results V2: Open