diff options
| author | Vishvananda Ishaya <vishvananda@gmail.com> | 2013-03-01 10:15:26 -0800 |
|---|---|---|
| committer | Vishvananda Ishaya <vishvananda@gmail.com> | 2013-03-15 09:35:24 -0700 |
| commit | 6b9f55a483e10013819a6317838ff69961617d4c (patch) | |
| tree | 5c7f573595430fe7ded5aa939a603086cbba87c3 /doc/source | |
| parent | 0e9e34010206fb62d5f29563290c41f703ddd947 (diff) | |
| download | python-keystoneclient-6b9f55a483e10013819a6317838ff69961617d4c.tar.gz | |
Cache tokens using memorycache from oslo.
Verifying tokens accounts for a significant portion of the time taken
by the various api servers. This uses the simple memory cache from
oslo so that there is a simple default cache even if memcached is not
deployed. Also cleans up the tests and removes unnecessary fakes.
DocImpact
Change-Id: I501c14f2f51da058cb574c32d49dd769e6f6ad86
Diffstat (limited to 'doc/source')
| -rw-r--r-- | doc/source/middlewarearchitecture.rst | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/doc/source/middlewarearchitecture.rst b/doc/source/middlewarearchitecture.rst index 407a5d2..803fbd9 100644 --- a/doc/source/middlewarearchitecture.rst +++ b/doc/source/middlewarearchitecture.rst @@ -196,15 +196,16 @@ Configuration Options Caching for improved response ----------------------------- -In order to prevent every service request, the middleware may be configured -to utilize a cache, and the keystone API returns the tokens with an -expiration (configurable in duration on the keystone service). The middleware -supports memcache based caching. +In order to prevent excessive requests and validations, the middleware uses an +in-memory cache for the tokens the keystone API returns. Keep in mind that +invalidated tokens may continue to work if they are still in the token cache, +so token_cache_time is configurable. For larger deployments, the middleware +also supports memcache based caching. * ``memcache_servers``: (optonal) if defined, the memcache server(s) to use for cacheing. It will be ignored if Swift MemcacheRing is used instead. -* ``token_cache_time``: (optional, default 300 seconds) Only valid if - memcache_servers is defined. +* ``token_cache_time``: (optional, default 300 seconds) Set to -1 to disable + caching completely. When deploying auth_token middleware with Swift, user may elect to use Swift MemcacheRing instead of the local Keystone memcache. |