On 11.09.2019 18:34, Sam Toliman wrote:
>
> Greetings,
>
> TLDR since 1.10 subversion loading acl file ~15x times slower, which
> leads in performance regression in tunnel mode used with svn+ssh scheme.
>
> https://subversion.apache.org/docs/release-notes/1.10#authzperf says
> that performance was improved, but we have discovered regression using
> large access files (>2Mb) (depersonalized:
> https://drive.google.com/file/d/1PP5n9BJkCs1Ssn47mHkI9dADPbo7DasJ/view).
>
The performance of authorization lookups was improved, by a couple
orders of magnitude. At the cost of making parsing to the internal
representation more complex. Not really surprising. That's why we added
a cache of the parsed results, but that only helps if there's a
long-running server process that can take advantage of the cache, which
you don't get in tunnel mode.
> It seems that in the tunnel mode redundantly parse all groups and all
> users - it should be done only for tunnel_user.
>
How do you propose that the parser should know, in advance, which parts
of the authz and groups files it can discard unless it parses all of them?
-- Brane
Received on 2019-09-11 22:24:56 CEST