+1 from me (disclaimer, I worked with Duong on this project) For those wanting the TLDR for this branch merge, we go from ~15k IOPS on OM for reads in secure clusters to 100k IOPS ( https://issues.apache.org/jira/browse/HDDS-8574) Merging this in and having more test time before 1.4 release is critical. Regards, Ritesh
On Fri, Jun 2, 2023 at 10:29 AM Ethan Rose <er...@cloudera.com.invalid> wrote: > +1 for the merge > > Ethan > > On Wed, May 31, 2023 at 7:31 PM Sumit Agrawal > <sumitagra...@cloudera.com.invalid> wrote: > > > Hi Duong, > > > > Thanks for working on this. > > > > Binding +1 > > > > Regards > > Sumit > > > > On Thu, Jun 1, 2023 at 6:10 AM Duong Nguyen <du...@apache.org> wrote: > > > > > Hi Ozone Devs, > > > > > > Following the discussion thread regarding the same topic, I'm starting > > this > > > vote thread for merging the feature branch HDDS-7733-Symmetric-Tokens > to > > > master. > > > The discussion thread > > > <https://lists.apache.org/thread/8hlxsj3f3n1tzgcsv6g94mb5jkkzlg8z> can > > be > > > found here. > > > > > > This feature branch contains the implementation to replace the costly > > token > > > signature generation using asymmetric (RSA) keys with symmetric key > > > algorithms, like HMAC with SHA256. Symmetric key algorithms bring a > > > much better performance and are the natural fit for Ozone token use > case. > > > Yet, they require building a mechanism to generate, store, distribute, > > and > > > renew symmetric secret keys. That requirement is not trivial and has to > > be > > > split into smaller tasks that cannot be shipped individually. That is > > > the reason why the implementation of HDDS-7733 > > > <https://issues.apache.org/jira/browse/HDDS-7733> happens in a > separate > > > feature branch. > > > > > > More information can be found on the wiki page: > > > > > > https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=255070328 > > > > > > Thanks, > > > Duong > > > > > > > > > -- > > *Sumit Agrawal* | Senior Staff Engineer > > cloudera.com <https://www.cloudera.com> > > [image: Cloudera] <https://www.cloudera.com/> > > [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image: > > Cloudera on Facebook] <https://www.facebook.com/cloudera> [image: > Cloudera > > on LinkedIn] <https://www.linkedin.com/company/cloudera> > > ------------------------------ > > >
