Hi Alan,

Understood, not sure if I could give AccessController that kind of workout using JDK classes alone, the library code is very performant.   It might be possible if AllPermission is granted and ClassLoaders are created using only class bytes, without accessing files, to avoid using the Java's PolicyFile, URLClassLoader, CodeSource and URL.  To be honest though, it would be a reasonable size task, sorry, but I don't have enough time.

Mahalo is a network transaction manager service, in the test it runs through 1000 transactions, each with 1 to 9 network participants, each participant is a proxy with a unique ProtectionDomain and ClassLoader (represents Server identity in the client) that's making remote method calls over TLS connections.

By the time the test complete's it's created over 20,000 ProtectionDomains and over 5,000 ClassLoader's, not all used at the same time of course, but there are a number of codebases involved, so there could be around 10 to 20 ProtectionDomain's in a call stack at the same time, these are being replaced, so it gives the AccessController quite a good workout.   Note these ProtectionDomains run using the principle of least privilege.

Even TLSv1.3's overhead is un-noticable, it's basically only limited by the speed of the underlying network sockets.

Thank you to the developers who made TLSv1.3 run so well.

https://imgur.com/VcSwffC

https://imgur.com/VcSwffC

https://imgur.com/hmFPnAW

https://imgur.com/IcUXzNK

https://imgur.com/MutdNNt

--
Regards,
Peter Firmstone
Zeus Project Services Pty Ltd.

https://imgur.com/VcSwffC

https://imgur.com/VcSwffC

On 12/05/2021 6:00 pm, Alan Bateman wrote:
On 12/05/2021 07:18, Peter Firmstone wrote:


https://github.com/pfirmstone/JGDMS/blob/trunk/qa/src/org/apache/river/test/impl/mahalo/RandomStressTest.java

https://github.com/pfirmstone/JGDMS/blob/trunk/qa/src/org/apache/river/test/impl/mahalo/RandomStressTest.td


It would be great if there were a JMH benchmark that didn't have any dependency on Apache River or other libs. That would make it a bit easier to study/diagnose.

-Alan

Reply via email to