[openstack-dev] Concerns about the ballooning size of keystone tokens

Chuck Thier cthier at gmail.com
Wed May 21 15:09:01 UTC 2014


There is a review for swift [1] that is requesting to set the max header
size to 16k to be able to support v3 keystone tokens.  That might be fine
if you measure you request rate in requests per minute, but this is
continuing to add significant overhead to swift.  Even if you *only* have
10,000 requests/sec to your swift cluster, an 8k token is adding almost
80MB/sec of bandwidth.  This will seem to be equally bad (if not worse) for
services like marconi.

When PKI tokens were first introduced, we raised concerns about the
unbounded size of of the token in the header, and were told that uuid style
tokens would still be usable, but all I heard at the summit, was to not use
them and PKI was the future of all things.

At what point do we re-evaluate the decision to go with pki tokens, and
that they may not be the best idea for apis like swift and marconi?

Thanks,

--
Chuck

[1] https://review.openstack.org/#/c/93356/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140521/2a5aa2a4/attachment.html>


More information about the OpenStack-dev mailing list