[
https://issues.apache.org/jira/browse/KAFKA-20667?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18101138#comment-18101138
]
Yunseop Eom commented on KAFKA-20667:
-------------------------------------
Follow-up: PR #23036 was closed after confirming that the existing upstream PR
https://github.com/apache/kafka/pull/22826 already addresses KAFKA-20667. No
duplicate contribution will be kept open.
> O(N) ACL scan in StandardAuthorizerData.checkSection
> -----------------------------------------------------
>
> Key: KAFKA-20667
> URL: https://issues.apache.org/jira/browse/KAFKA-20667
> Project: Kafka
> Issue Type: Bug
> Components: core
> Affects Versions: 3.9.2
> Reporter: ibenchhida
> Priority: Critical
> Labels: authorization, perfomance
>
> Root cause: checkSection() iterates all ACLs sharing the same resource
> pattern via TreePSet.tailSet(), calling HashSet.contains per ACL × topic.
> With 504 topics × 7001 ACLs → ~3.5M iterations per MetadataRequest.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
