Intermittently latency issue with keycloak-policy-enforcer library

[Naresh Kumar]

Hello,

We are facing latency issues intermittently in our production environment during API authorization enforcement with keycloak-policy-enforcer library version 26.0.4. Below are few observations:

• Latency time ranges from 15 minutes to 30 minutes.
  
• We have set path cache max entries to 5000.
  
• We suspect in PatchConfigMatcher.java line no:70 pathcache.get() call before invoking findByMatchingUri() is blocking the thread because of the below snippet from PathCache.java.

I would appreciate any assistance regarding this issue at the earliest possible.

Thank you,

Naresh Kumar

[Alexander Schwartz]

Hi Naresh,

if you believe this is a bug, please create an issue in https://github.com/keycloak/keycloak-client for this. 

It would be good if you could provide a stack trace showing a response that is taking very long. 

A random guess: As this is evaluating regular expressions, please check your pattern for ReDoS problems.

Best,

Alexander

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/keycloak-user/CAC4AWezBs8Ze2kr75aXjezTiV8zxyTvQyfyRSV3NP28umsJAxg%40mail.gmail.com.

--

Alexander Schwartz, RHCE

He/Him

Principal Software Engineer, Keycloak Maintainer

Red Hat - Germany remote

asch...@redhat.com   

Red Hat GmbH, Registered seat: Werner von Siemens Ring 12, D-85630 Grasbrunn, Germany 
Commercial register: Amtsgericht Muenchen/Munich, HRB 153243,
Managing Directors: Ryan Barnhart, Charles Cachera, Michael O'Neill, Amy Ross

[Naresh Kumar]

Hi Alexander,

As suggested, I have raised the issue.

Link : https://github.com/keycloak/keycloak-client/issues/160

Thanks,

Naresh Kumar