aureq / letslambda

3 stars 2 forks source link

Allow large number of domain to be handled within the same function #25

Closed aureq closed 8 years ago

aureq commented 8 years ago

At the moment it's not possible for LetsLambda to get issuance of too many certificate due to time limitation in Lambda (300 seconds). This limitation is caused by 2 main elements. First is the Route53 DNS propagation (up to 60 seconds) and the second is related to the time required to generate a private key.

aureq commented 8 years ago

The idea is to allow LetsLambda to call itself with a different payload. Each domain present in letslambda.yml would be issued/renewed within its own Lambda invocation hence allowing a lot more certificates to be renewed in parallel.

Notes:

aureq commented 8 years ago

The DynamoDB table capacity should be updated accordingly to concurrent_execution to ensure no child call is stuck pending read or write capacity.

aureq commented 8 years ago

This code is considered alpha since it requires some load testing to further check the stability. To do: