Closed aureq closed 8 years ago
The idea is to allow LetsLambda to call itself with a different payload. Each domain present in letslambda.yml
would be issued/renewed within its own Lambda invocation hence allowing a lot more certificates to be renewed in parallel.
Notes:
context
object.The DynamoDB table capacity should be updated accordingly to concurrent_execution
to ensure no child call is stuck pending read or write capacity.
This code is considered alpha since it requires some load testing to further check the stability. To do:
invoke
call must be updated to handle exceptions and throttling events
At the moment it's not possible for LetsLambda to get issuance of too many certificate due to time limitation in Lambda (300 seconds). This limitation is caused by 2 main elements. First is the Route53 DNS propagation (up to 60 seconds) and the second is related to the time required to generate a private key.