[GitHub] rabbah commented on issue #3501: Performance issue with multiple actions

[GitBox <gi...@apache.org>]

rabbah commented on issue #3501: Performance issue with multiple actions
URL: https://github.com/apache/incubator-openwhisk/issues/3501#issuecomment-377788654
 
 
   Thanks @style95 for the detailed write up. As I noted on the Apache dev list the main issue in a multitenant deployment is the approach compromises container isolation: while a private deployment of openwhisk may allow you to relax some of the security and isolation, it is a nonstarter to reuse a container for more that one subject otherwise. The container can be entirely tainted where traffic is snooped, secrets stolen, or even the code itself.
   
   The container isolation in place today also serves another purpose: isolating bugs related to concurrency.  If your JavaScript code doesn’t properly handle asynchronous callbacks, you might have two actions still running at once across different functions. So beyond security implications there will be performance isolation that’s also risked.
   
   That said, https://github.com/apache/incubator-openwhisk/pull/2795 from @tysonnorris increases intra-container concurrency to reduce the load on the docker daemon. Further, creating more stem cells containers ahead of time is another way to avoid docker runs.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services