From b0f330e7b2a805c87a988d1cd312ec766e5e9f39 Mon Sep 17 00:00:00 2001 From: Samuel Matzek Date: Fri, 28 Oct 2016 15:29:46 +0200 Subject: [PATCH] Swift proxy performance fixes Performance testing of an OSA deployed Swift cluster hit several issues. Comparison of the proxy conf with the Swift Auth docu [1] found two settings that affect performance that that were not set in the template. include_service_catalog - This defaults to True which makes the proxy server fetch the service catalog on every request in the authtoken middleware. This hammers Keystone. cache - When using memcache this should be set so the authtoken middleware uses the correct cache and not go back to Keystone on every request. [1] http://docs.openstack.org/developer/swift/overview_auth.html Change-Id: Iddaf097e3ff5c1b7118b11cfc598a40a91d6f96f --- templates/proxy-server.conf.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/templates/proxy-server.conf.j2 b/templates/proxy-server.conf.j2 index df6f1510..9834730b 100644 --- a/templates/proxy-server.conf.j2 +++ b/templates/proxy-server.conf.j2 @@ -91,8 +91,10 @@ project_name = {{ swift_service_project_name }} username = {{ swift_service_user_name }} password = {{ swift_service_password }} delay_auth_decision = {{ swift_delay_auth_decision }} +include_service_catalog = False {% if memcached_servers is defined %} memcached_servers = {{ memcached_servers }} +cache = swift.cache token_cache_time = 300 revocation_cache_time = 60