yahoo-eng-team team mailing list archive

[Alan Pevec <1253755@xxxxxxxxxxxxxxxxxx>]

** Changed in: keystone/havana
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1253755

Title:
  keystone.token.backends.sql list_revoked_tokens performs very poorly

Status in OpenStack Identity (Keystone):
  Fix Released
Status in Keystone havana series:
  Fix Released

Bug description:
  The query that it makes use of is extremely inefficient, as it must
  retrieve the massive 'extra' field when it does not need it. Also
  there is no index that covers both expires and valid, so we can only
  do a range query on expires and then filter for valid.

  Test situation is a poorly tuned mysql that has a token table with
  865000 rows, 35000 of which are revoked (2000 of which are unexpired).

  Adding an index on token+valid did speed the query up some, but it
  still took on average 2 seconds to return all ~2000 revoked token
  rows. Also changing the query to only query the id and expires columns
  resulted in the query taking 0.02 seconds to run, leading to a much
  more responsive experience throughout the cloud.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1253755/+subscriptions