search

envoyproxy / envoy

Cloud-native high-performance edge/middle/service proxy
https://www.envoyproxy.io
Apache License 2.0
24.72k stars 4.76k forks source link

Support Caching in External Auth Filter #3023

Open ramaraochavali opened 6 years ago

ramaraochavali commented 6 years ago

Currently External Auth filter reaches out to configured external auth service for every request. This is a performance penalty. It should support some level of caching so that it does not go to external auth for every request

jmarantz commented 6 years ago

Curious: what would be the TTL of such a cache?

jmarantz commented 6 years ago

xrefing https://github.com/envoyproxy/envoy/issues/868 which is about HTTP caching, but would introduce the existence of a physical cache

selslack commented 4 years ago

@jmarantz since #868 is solved now, what does it take to implement this?

dm3ch commented 2 years ago

Is there any progress or plans?

Curious: what would be the TTL of such a cache?

I think TTL should be configurable. :)

dkeysil commented 1 year ago

It must be prioritized.

How can you use an external authenticator without a cache. This reduces performance too much.

luvk1412 commented 1 month ago

It would be great to have this. Ext auth without a cache is practically unusable.

Use Case : I am setting up Envoy Gateway in our infra and wanted to centralise auth. Currently each of our services has a local cache. If I shift to authorisation using envoy, both request count on central auth service would increase and latency of req would also increase.

A configuration where users can enable/disable caching and also mention a ttl for the cache if enabled would be helpful.