On Tue, Jun 21, 2016 at 7:04 PM, Sam Morrison <sorrison at gmail.com> wrote: > > On 22 Jun 2016, at 10:58 AM, Matt Fischer <matt at mattfischer.com> wrote: > > Have you setup token caching at the service level? Meaning a Memcache > cluster that glance, Nova etc would talk to directly? That will really cut > down the traffic. > > Yeah we have that although the default cache time is 10 seconds for > revocation lists. I might just set that to some large number to limit this > traffic a bit. > > Sam > We have ours set to 60 seconds. I've fiddled around with it some, but I've found that revocation events are damaging to perf no matter how much magic you try to apply. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160621/c7115f84/attachment.html>