You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/04/04 10:53:48 UTC
[GitHub] [apisix] mehmetcuneyit opened a new issue, #6792: help request: openid-connect plugin server-side storage configuration
mehmetcuneyit opened a new issue, #6792:
URL: https://github.com/apache/apisix/issues/6792
### Description
I see that [lua-resty-openidc](https://github.com/zmartzone/lua-resty-openidc) does the heavy-lifting. I would like to monitor/manage the session cache, and also use another server-side storage mechanisms other than shared-memory(default), e.g. memcache or redis. I'm worried about the shared-memory performance for large number of user sessions(1M+) even after proper scaling.
- How can I configure apisix to use redis as the session storage ?
- Do I need to scale APISIX gateway to manage large number sessions ?
- What would you suggest for the production as best practice ?
Any opinion would be appreciated :pray:
### Environment
- APISIX version (run `apisix version`): **2.13.0**
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] spacewander commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by GitBox <gi...@apache.org>.
spacewander commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1088521618
Look like lua-resty-openidc only supports using shared-memory as the cache?
See https://github.com/zmartzone/lua-resty-openidc/blob/a468d13283d62ef5e3d14f02404294f7777c053d/lib/resty/openidc.lua#L102
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] mehmetcuneyit commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by GitBox <gi...@apache.org>.
mehmetcuneyit commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1088599472
@spacewander I think it is doable. Underlying library [lua-resty-session](https://github.com/bungle/lua-resty-session) supports various options for the session storage ( see [PluggableStorageAdapters](https://github.com/bungle/lua-resty-session#pluggable-storage-adapters) ) . I'm trying to figure out how I can pass the library configurations through (apisix conf yaml OR openid-connect plugin) -> lua-resty-openidc -> lua-resty-session. ( e.g. [regis storage adapter](https://github.com/bungle/lua-resty-session#redis-storage-adapter) )
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] closed issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #6792: help request: openid-connect plugin server-side session storage configuration
URL: https://github.com/apache/apisix/issues/6792
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] mehmetcuneyit commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by GitBox <gi...@apache.org>.
mehmetcuneyit commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1126999266
@spacewander Temp solution would be like https://the-asf.slack.com/archives/CUC5MN17A/p1652640355608239?thread_ts=1652270452.089599&cid=CUC5MN17A
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] spacewander commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by GitBox <gi...@apache.org>.
spacewander commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1089883537
> How can I configure APISIX to use redis as the session storage
You can refer to https://github.com/bungle/lua-resty-session#redis-storage-adapter and https://github.com/apache/apisix/blob/master/docs/en/latest/customize-nginx-configuration.md. Or you can contribute the code to https://github.com/apache/apisix/blob/master/apisix/cli/ngx_tpl.lua
lua-resty-session puts its configuration in the Nginx conf so we can't update it without reloading Nginx. It would be great if you can submit a PR to it, and make lua-resty-session configurable with Lua code. You can refer to https://github.com/apache/apisix/blob/master/apisix/plugins/limit-count/limit-count-redis-cluster.lua
> Do I need to scale APISIX gateway to manage large number of sessions
> What would you suggest about managing APISIX session storage in multi-cluster environment?
Since APISIX is stateless, we can scale APISIX as needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1582274820
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] commented on issue #6792: help request: openid-connect plugin server-side session storage configuration
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #6792:
URL: https://github.com/apache/apisix/issues/6792#issuecomment-1560826207
This issue has been marked as stale due to 350 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org