Open Stack

On 10/30/2012 08:57 AM, Christopher Yeoh wrote:

> Eg. if as I think its not possible to optimise large creation/deletes
> then is it ok if only admin users can access the API and that they
> should know better than to do this in the first place? 
> 
> Or should I attempt to simply reject any requests where there are too
> many ips being deleted/created at one time? (eg /24 as the biggest bulk
> request?)

Sorry to re-awaken an old thread, but I was just chatting with Chris on
IRC and I think this is an issue. A /16 with this code currently takes
several minutes to create -- and its entirely possible that people will
create something bigger.

Do we think people will deploy this with a special API server just for
admin requests, or just use the existing server?

I suspect we should limit the size of creation requests to a /24 and
have the client chunk. Its not too much more inefficient, and smooths
the load on the API server.

I'd like to see more discussion of this to be honest.

Mikal