[
https://issues.apache.org/jira/browse/KAFKA-20667?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18086403#comment-18086403
]
ibenchhida commented on KAFKA-20667:
------------------------------------
"""
(data-plane-kafka-request-handler-0" #80 daemon prio=5 os_prio=0
*cpu=17207014.77ms* elapsed=18143.19s tid=0x00007f76d50aa800 nid=0x8e7bb
runnable [0x00007f7681480000]
java.lang.Thread.State: RUNNABLE
at
org.apache.kafka.metadata.authorizer.StandardAcl.kafkaPrincipal(StandardAcl.java:106)
at
org.apache.kafka.metadata.authorizer.StandardAuthorizerData.findResult(StandardAuthorizerData.java:493)
at
org.apache.kafka.metadata.authorizer.StandardAuthorizerData.checkSection(StandardAuthorizerData.java:428)
at
org.apache.kafka.metadata.authorizer.StandardAuthorizerData.findAclRule(StandardAuthorizerData.java:367)
at
org.apache.kafka.metadata.authorizer.StandardAuthorizerData.authorize(StandardAuthorizerData.java:247)
at
org.apache.kafka.metadata.authorizer.StandardAuthorizer.authorize(StandardAuthorizer.java:143)
at kafka.server.AuthHelper.filterByAuthorized(AuthHelper.scala:113)
at
kafka.server.KafkaApis.handleTopicMetadataRequest(KafkaApis.scala:1350)
at kafka.server.KafkaApis.handle(KafkaApis.scala:192)
at kafka.server.KafkaRequestHandler.run(KafkaRequestHandler.scala:159)
at java.lang.Thread.run([email protected]/Thread.java:829)
)
"""
> O(N) ACL scan in StandardAuthorizerData.checkSection
> -----------------------------------------------------
>
> Key: KAFKA-20667
> URL: https://issues.apache.org/jira/browse/KAFKA-20667
> Project: Kafka
> Issue Type: Bug
> Components: core
> Affects Versions: 3.9.2
> Reporter: ibenchhida
> Priority: Critical
>
> Root cause: checkSection() iterates all ACLs sharing the same resource
> pattern via TreePSet.tailSet(), calling HashSet.contains per ACL × topic.
> With 504 topics × 7001 ACLs → ~3.5M iterations per MetadataRequest.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
