[openstack-dev] [nova][keystone] Message Queue Security
eric at cloudscaling.com
Fri Apr 26 20:09:10 UTC 2013
> Also read the email I sent today, the number of lookups is down to 1
> now, just like in the public key case.
Except in the public-key case, the lookup is done on the receiving end for verifications, not on the sender-side.
The receiving end tends to scale-out more than the sending end and can more comfortably handle these lookups.
The 5 schedulers sending to 1000 compute or volume services shouldn't bear the burden of performing lookups if those lookups can be performed on the receiving end. 1000 hosts can more comfortably make queries than 5 hosts can.
More information about the OpenStack-dev