]> git.ipfire.org Git - thirdparty/haproxy.git/commit
DOC/MINOR: userlists: mention solutions to high cpu with hashes
authorNicolas CARPi <nico-git@deltablot.email>
Mon, 12 Feb 2024 17:03:52 +0000 (18:03 +0100)
committerWilly Tarreau <w@1wt.eu>
Fri, 16 Feb 2024 09:07:03 +0000 (10:07 +0100)
commit07fd4e8b5e645d9baafed948ccbdbd7b59373c33
tree15eed60502a949b2f4260aca2fb34e19b5d646f9
parentf8df9bd6a5057647c2999ace0b27474c7008b421
DOC/MINOR: userlists: mention solutions to high cpu with hashes

This change adds a paragraph to the documentation regarding "userlists"
and the use of hashed password value.

It indicates what a user can do to address the high CPU cost of
having to calculate the hash at each request, such as reducing the
number of rounds or the cost complexity, if the algorithm allows for it.

I believe it is necessary to mention how the musl C library
impacts performance of hashing functions, as this has already led to a
few issues:

https://github.com/haproxy/haproxy/issues/1298
https://github.com/haproxy/haproxy/issues/2008
https://github.com/haproxy/haproxy/issues/2251

The performance impact is significant enough to mention it.

Acked-by: Lukas Tribus <lukas@ltri.eu>
doc/configuration.txt