On 11.09.2019 18:34, Sam Toliman wrote: > > Greetings, > > TLDR since 1.10 subversion loading acl file ~15x times slower, which > leads in performance regression in tunnel mode used with svn+ssh scheme. > > https://subversion.apache.org/docs/release-notes/1.10#authzperf says > that performance was improved, but we have discovered regression using > large access files (>2Mb) (depersonalized: > https://drive.google.com/file/d/1PP5n9BJkCs1Ssn47mHkI9dADPbo7DasJ/view). >
The performance of authorization lookups was improved, by a couple orders of magnitude. At the cost of making parsing to the internal representation more complex. Not really surprising. That's why we added a cache of the parsed results, but that only helps if there's a long-running server process that can take advantage of the cache, which you don't get in tunnel mode. > It seems that in the tunnel mode redundantly parse all groups and all > users - it should be done only for tunnel_user. > How do you propose that the parser should know, in advance, which parts of the authz and groups files it can discard unless it parses all of them? -- Brane
