[openstack-dev] [MagnetoDB] PKI tokens size performance impact

Illia Khudoshyn ikhudoshyn at mirantis.com
Mon Sep 29 12:55:12 UTC 2014


Nice to hear that we won't implement our own 'enlightening' layer.
Main concern for me would be much more code to look through for security
issues.

Thanks,
Illia.

On Mon, Sep 29, 2014 at 2:36 PM, Ilya Sviridov <isviridov at mirantis.com>
wrote:

> Hello Aleksandr,
>
> Thank you for your efforts and sharing this.
>
> Looking closer to figures, I can assume that lightweight session won't
> help us a lot, but will introduce additional complexity.
>
> So, I'm marking the BP as Obsolete.
>
> Ilya Sviridov
> isviridov @ FreeNode
>
>
>
> On Mon, Sep 29, 2014 at 1:21 PM, Aleksandr Chudnovets <
> achudnovets at mirantis.com> wrote:
>
>> Hello team,
>>
>> As it was discussed on IRC meeting yesterday I’m glad to share the
>> results of my testing of performance impact of PKI token validation.
>>
>> My research is connected with bp [1] about adding lightweight session to
>> mdb for improvement overall performance.
>>
>> For my tests I used PKI tokens with and without service catalog.
>>
>> (Actually, PKI tokens is only option for MagnetoDB, because MagnetoDB
>>
>> was designed to handle huge amount of requests per second.)
>>
>> Here is my results:
>>
>> - for lightweight requests, like list_tables, we can get 5% - 8%
>> performance boost using tokens without service catalog;
>>
>> - for big and slow requests, like batch_write, performance boost is
>> smaller.
>>
>> - disabling keystone support in api-paste gives us 20% performance boost
>> for PKI tokens :)
>>
>> So it can be good practice for MagnetoDB clients to use PKI tokens without
>>
>> service catalog.
>>
>> Another conclusion I can made, the PKI token validation works fast enough
>> and adding additional session mechanism won’t give big performance boost.
>>
>> Please share your views.
>>
>> [1] https://blueprints.launchpad.net/magnetodb/+spec/light-weight-session
>>
>> Thanks,
>>
>> Aleksandr Chudnovets
>>
>
>


-- 

Best regards,

Illia Khudoshyn,
Software Engineer, Mirantis, Inc.



38, Lenina ave. Kharkov, Ukraine

www.mirantis.com <http://www.mirantis.ru/>

www.mirantis.ru



Skype: gluke_work

ikhudoshyn at mirantis.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140929/6c377ab9/attachment.html>


More information about the OpenStack-dev mailing list