HoustonPutman opened a new pull request, #3334:
URL: https://github.com/apache/solr/pull/3334

   https://issues.apache.org/jira/browse/SOLR-16951
   
   - Default PKI TTL has been increased to 10 seconds
   - The PKI Generation cache will expire cached tokens after 1/4 of the TTL 
time, to give a minimum 3/4 of the TTL time for transportation.
   - The PKI Generation cache will start refreshing cached tokens 1/2 of the 
expiration time (1/8 of the TTL time), to give time for the asynchronous 
refresh to complete before the token is expired. I would set this to 
`expirationTime - 50ms`, but CaffeineCache requires a `get()` in order to 
trigger the async refresh, so we want to give time between `refreshTime` and 
`expireTime` for a request to come in to trigger the refresh. 1/2 of the 
expiration time should be fine here.
   - I don't expect to get more than 100 users that often, so I think this is a 
safe cache limit for generation. For validation, the node name is included in 
the token, so we need an order of magnitude bigger cache. I chose 1000 here, 
but this can probably be changed if we need to. The validation cache isn't as 
important as the generation cache, so it shouldn't be a huge deal.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to