Security groups RBAC cause a major performance degradation
Bug #1830679 reported by
Adit Sarfaty
This bug affects 6 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
High
|
Miguel Lavalle |
Bug Description
On stable/Stein & Train, a setup with about 6000 security groups of different tenants.
Using admin user, getting all security groups with GET /v2.0/security-
Using the credentials of one of the tenants, who has only 1 security groups takes about 800 seconds.
Looking at the mysql DB logs reveals lots of RBAC related queries during thoee 800 seconds.
Tried to revert the RBAC PATCH https:/
Now it takes less than a seconds to get security groups of a tenant.
tags: | added: api loadimpact |
Changed in neutron: | |
importance: | Undecided → High |
Changed in neutron: | |
assignee: | nobody → Miguel Lavalle (minsel) |
Changed in neutron: | |
assignee: | Miguel Lavalle (minsel) → Boden R (boden) |
status: | New → In Progress |
tags: | added: neutron-proactive-backport-potential |
tags: | removed: neutron-proactive-backport-potential |
To post a comment you must log in.
RBAC queries for security groups are joined as "subquery" and I guess this leads to a lot of queries when listing security groups for a tenant. We need to check how we can improve the RBAC performance.