On Thu, 2015-05-28 at 17:07 +0200, Christian Heimes wrote: > On 2015-05-28 16:48, Nathaniel McCallum wrote: > > An apache module would also provide similar benefits. I'm not sure > > I > > necessarily want to stick with python here if we're optimizing for > > performance. Another option would be to add it to the KDC itself > > and > > proxy through Apache like we do for Tomcat. MIT might like that > > option. > > For that kind of network code Python is really fast enough. An event > driven framework like asyncio or Twisted can handle lots of > connections > simultaneous. We aren't speaking about several GBit/sec where zero > -copy > is required. > > I'm more worried about Apache than Python. Apache is tuned for the > needs > of the webui, e.g. prefork MPM. Let's see how it works out in a > production system.
Right. And the KDC could just parse the messages directly. I agree. Let's wait and see. Nathaniel -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
