+1 (Binding)

-Ayush

> On 02-Jun-2023, at 11:14 PM, Wei-Chiu Chuang <weic...@apache.org> wrote:
> 
> +1 (binding)
> 
> I was involved when Duong discovered the issue and proposed the solution,
> and was involved in reviewing some of the patches.
> 
>> On Fri, Jun 2, 2023 at 10:35 AM Ritesh Shukla <rit...@cloudera.com.invalid>
>> wrote:
>> 
>> +1 from me (disclaimer, I worked with Duong on this project)
>> For those wanting the TLDR for this branch merge, we go from ~15k IOPS on
>> OM for reads in secure clusters to 100k IOPS (
>> https://issues.apache.org/jira/browse/HDDS-8574)
>> Merging this in and having more test time before 1.4 release is critical.
>> Regards,
>> Ritesh
>> 
>> On Fri, Jun 2, 2023 at 10:29 AM Ethan Rose <er...@cloudera.com.invalid>
>> wrote:
>> 
>>> +1 for the merge
>>> 
>>> Ethan
>>> 
>>> On Wed, May 31, 2023 at 7:31 PM Sumit Agrawal
>>> <sumitagra...@cloudera.com.invalid> wrote:
>>> 
>>>> Hi Duong,
>>>> 
>>>> Thanks for working on this.
>>>> 
>>>> Binding +1
>>>> 
>>>> Regards
>>>> Sumit
>>>> 
>>>> On Thu, Jun 1, 2023 at 6:10 AM Duong Nguyen <du...@apache.org> wrote:
>>>> 
>>>>> Hi Ozone Devs,
>>>>> 
>>>>> Following the discussion thread regarding the same topic, I'm
>> starting
>>>> this
>>>>> vote thread for merging the feature branch HDDS-7733-Symmetric-Tokens
>>> to
>>>>> master.
>>>>> The discussion thread
>>>>> <https://lists.apache.org/thread/8hlxsj3f3n1tzgcsv6g94mb5jkkzlg8z>
>> can
>>>> be
>>>>> found here.
>>>>> 
>>>>> This feature branch contains the implementation to replace the costly
>>>> token
>>>>> signature generation using asymmetric (RSA) keys with symmetric key
>>>>> algorithms, like HMAC with SHA256. Symmetric key algorithms bring a
>>>>> much better performance and are the natural fit for Ozone token use
>>> case.
>>>>> Yet, they require building a mechanism to generate, store,
>> distribute,
>>>> and
>>>>> renew symmetric secret keys. That requirement is not trivial and has
>> to
>>>> be
>>>>> split into smaller tasks that cannot be shipped individually. That is
>>>>> the reason why the implementation of HDDS-7733
>>>>> <https://issues.apache.org/jira/browse/HDDS-7733> happens in a
>>> separate
>>>>> feature branch.
>>>>> 
>>>>> More information can be found on the wiki page:
>>>>> 
>>>> 
>>> 
>> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=255070328
>>>>> 
>>>>> Thanks,
>>>>> Duong
>>>>> 
>>>> 
>>>> 
>>>> --
>>>> *Sumit Agrawal* | Senior Staff Engineer
>>>> cloudera.com <https://www.cloudera.com>
>>>> [image: Cloudera] <https://www.cloudera.com/>
>>>> [image: Cloudera on Twitter] <https://twitter.com/cloudera> [image:
>>>> Cloudera on Facebook] <https://www.facebook.com/cloudera> [image:
>>> Cloudera
>>>> on LinkedIn] <https://www.linkedin.com/company/cloudera>
>>>> ------------------------------
>>>> 
>>> 
>> 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@ozone.apache.org
For additional commands, e-mail: dev-h...@ozone.apache.org

Reply via email to