Introduce Arena to allocate buffers which can't participate in memory dump
Open
- Dominant language
- C++
- Stars
- 16.7k
- Forks
- 1.6k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 126
Description
FDB encryption support need to cache plaintext encryption keys in-memory; the ask with this ticket to devise measure such that FDB process dump doesn't end up persisting encryption keys cached in memory OR while it is getting constructed (encryption key derivation scheme); one proposal is:
1. Create an Arena backed by jemalloc allocated buffers.
2. Leverage [madvice](https://man7.org/linux/man-pages/man2/madvise.2.html) and set `MADV_DONTDUMP` to allocate buffers which needs to be prevented from FDB process memory dump.
Contributor guide
Assessment
This issue has not been assessed yet.