+1 (binding) I was involved when Duong discovered the issue and proposed the solution, and was involved in reviewing some of the patches.
On Fri, Jun 2, 2023 at 10:35 AM Ritesh Shukla <rit...@cloudera.com.invalid> wrote: > +1 from me (disclaimer, I worked with Duong on this project) > For those wanting the TLDR for this branch merge, we go from ~15k IOPS on > OM for reads in secure clusters to 100k IOPS ( > https://issues.apache.org/jira/browse/HDDS-8574) > Merging this in and having more test time before 1.4 release is critical. > Regards, > Ritesh > > On Fri, Jun 2, 2023 at 10:29 AM Ethan Rose <er...@cloudera.com.invalid> > wrote: > > > +1 for the merge > > > > Ethan > > > > On Wed, May 31, 2023 at 7:31 PM Sumit Agrawal > > <sumitagra...@cloudera.com.invalid> wrote: > > > > > Hi Duong, > > > > > > Thanks for working on this. > > > > > > Binding +1 > > > > > > Regards > > > Sumit > > > > > > On Thu, Jun 1, 2023 at 6:10 AM Duong Nguyen <du...@apache.org> wrote: > > > > > > > Hi Ozone Devs, > > > > > > > > Following the discussion thread regarding the same topic, I'm > starting > > > this > > > > vote thread for merging the feature branch HDDS-7733-Symmetric-Tokens > > to > > > > master. > > > > The discussion thread > > > > <https://lists.apache.org/thread/8hlxsj3f3n1tzgcsv6g94mb5jkkzlg8z> > can > > > be > > > > found here. > > > > > > > > This feature branch contains the implementation to replace the costly > > > token > > > > signature generation using asymmetric (RSA) keys with symmetric key > > > > algorithms, like HMAC with SHA256. Symmetric key algorithms bring a > > > > much better performance and are the natural fit for Ozone token use > > case. > > > > Yet, they require building a mechanism to generate, store, > distribute, > > > and > > > > renew symmetric secret keys. That requirement is not trivial and has > to > > > be > > > > split into smaller tasks that cannot be shipped individually. That is > > > > the reason why the implementation of HDDS-7733 > > > > <https://issues.apache.org/jira/browse/HDDS-7733> happens in a > > separate > > > > feature branch. > > > > > > > > More information can be found on the wiki page: > > > > > > > > > > https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=255070328 > > > > > > > > Thanks, > > > > Duong > > > > > > > > > > > > > -- > > > *Sumit Agrawal* | Senior Staff Engineer > > > cloudera.com <https://www.cloudera.com> > > > [image: Cloudera] <https://www.cloudera.com/> > > > [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image: > > > Cloudera on Facebook] <https://www.facebook.com/cloudera> [image: > > Cloudera > > > on LinkedIn] <https://www.linkedin.com/company/cloudera> > > > ------------------------------ > > > > > >
