There are some test results mentioned in the Test Plan section of the Kip, but we need to do more testing with various patterns and permission types. As mentioned in the discuss thread, the trie implementation could potentially surpass the current speed of ACL match.
However, we can only accurately assess the results after updating the actual classes and analysing them with AuthorizerBenchmark. Thanks, Murali On Mon, 17 Jun 2024 at 20:39, Colin McCabe <cmcc...@apache.org> wrote: > My concern is that the extra complexity may actually slow us down. In > general people already complain about the speed of ACL matches, and adding > another "degree of freedom" seems likely to make things worse. > > It would be useful to understand how much faster or slower the code is > with the propsed changes, versus without them. > > best, > Colin > > > On Mon, Jun 17, 2024, at 01:26, Muralidhar Basani wrote: > > Hi all, > > > > I would like to call a vote on KIP-1042 which extends creation of acls > with > > MATCH pattern type. > > > > KIP - > > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-1042%3A+Support+for+wildcard+when+creating+new+acls > > > > Discussion thread - > > https://lists.apache.org/thread/xx3lcg60kp4v34x0j9p6xobby8l4cfq2 > > > > Thanks, > > Murali >
