envoyproxy / envoyproxy/envoy-mobile

certificates: coalesce concurrent validations of the same host

Open
#2,612 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
566
Forks
85
PR merge metrics
No merged PRs in 30d

Description

https://github.com/envoyproxy/envoy-mobile/pull/2525 made cronet and c++ engines be able to use platform provided APIs to asynchronously verify certificates. It is done by creating stand-alone threads to call into platform APIs when each validation is requested. Doing so ensures Envoy Mobile's network thread won't be blocked by these platform APIs calls, but one thread for one validation might be expensive for both memory and CPU. We want to improve that by limiting the number of validation threads and coalesce concurrent validations of the same host.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.