https://authzed.com logo
Powered by
spicedb
  • j

    Joey

    11/11/2022, 8:42 PM
    they also are keyed by {resource, permission, subject}
  • j

    Joey

    11/11/2022, 8:42 PM
    so you should only see higher hit rates if you are issuing checks that share data
  • s

    symion

    11/11/2022, 8:44 PM
    I don't see any.
  • j

    Joey

    11/11/2022, 8:44 PM
    do you have dispatch turned on?
  • s

    symion

    11/11/2022, 8:44 PM
    good question...
  • s

    symion

    11/11/2022, 8:45 PM
    probably not? what is that? why would I not turn it on?
  • j

    Joey

    11/11/2022, 8:45 PM
    it needs to be configured
  • j

    Joey

    11/11/2022, 8:45 PM
    if you are running under Kubernetes, its fairly easy to do
  • j

    Joey

    11/11/2022, 8:45 PM
    the operator also does it automatically
  • j

    Joey

    11/11/2022, 8:45 PM
    but otherwise, its up to you to configure
  • j

    Joey

    11/11/2022, 8:45 PM
    because we have no way of knowing how you're running the instances and where otherwise
  • s

    symion

    11/11/2022, 8:46 PM
    what does it do?
  • j

    Joey

    11/11/2022, 8:46 PM
    it splits traffic across the nodes via a token hash ring
  • s

    symion

    11/11/2022, 8:46 PM
    oh. that sounds useful
  • j

    Joey

    11/11/2022, 8:47 PM
    basically, when a request comes in, it picks the node most likely to have the result in its existing cache
  • j

    Joey

    11/11/2022, 8:47 PM
    and forwards the request
  • j

    Joey

    11/11/2022, 8:47 PM
    yep!
  • j

    Joey

    11/11/2022, 8:47 PM
    but it does require some configuration in SpiceDB
  • s

    symion

    11/11/2022, 8:47 PM
    docs?
  • j

    Joey

    11/11/2022, 8:47 PM
    and means you should have SpiceDB behind a load balancer of some kind
  • j

    Joey

    11/11/2022, 8:47 PM
    https://authzed.com/blog/consistent-hash-load-balancing-grpc/
  • j

    Joey

    11/11/2022, 8:47 PM
    let me find the docs, but that blog post explains how it works
  • j

    Joey

    11/11/2022, 8:47 PM
    --dispatch-upstream-addr=kubernetes:///spicedb.default:50053
    is the flag in Kub
  • j

    Joey

    11/11/2022, 8:48 PM
    although if you're running in Kubernetes, I'd highly suggest using the operator
  • j

    Joey

    11/11/2022, 8:48 PM
    which will do it all for you
  • s

    symion

    11/11/2022, 8:48 PM
    we run it on K8S w/ a service and talk to the service. That is that basically
  • j

    Joey

    11/11/2022, 8:48 PM
    I'd highly recommend the operator
  • j

    Joey

    11/11/2022, 8:48 PM
    https://github.com/authzed/spicedb-operator
  • j

    Joey

    11/11/2022, 8:48 PM
    https://docs.authzed.com/spicedb/operator
1...262263264...325Latest