Code

VAULT-31264: Limit raft joins#28790

Code

Merged

miagilepner merged 12 commits intomainhashicorp/vault:mainfrom miagilepner/VAULT-31264-raft-join-limthashicorp/vault:miagilepner/VAULT-31264-raft-join-limtCopy head branch name to clipboardOct 29, 2024

Commits

Commits on Oct 28, 2024

• Switch from an unbounded Map to an LRU, 429 when exceeding it's size, and repeat challenges to the same server rather than encrypting new ones

  

  sgmiller

  authored and

  miagilepner

  committed
  3731e52

  Copy full SHA for 3731e52

• Prune old challenges

  

  sgmiller

  authored and

  miagilepner

  committed
  390649f

  Copy full SHA for 390649f

• Remove from pending only if the answer is correct

  

  sgmiller

  authored and

  miagilepner

  committed
  7927f82

  Copy full SHA for 7927f82

• Add a unit test that validates 429s, delays, and eviction of old entries

  

  sgmiller

  authored and

  miagilepner

  committed
  beb880d

  Copy full SHA for beb880d

• Switch to using a flat token bucket from x/time/rate

  

  sgmiller

  authored and

  miagilepner

  committed
  bb2a533

  Copy full SHA for bb2a533

• remove from LRU on each challenge write

  

  sgmiller

  authored and

  miagilepner

  committed
  306eae1

  Copy full SHA for 306eae1

• Remove sleep, simplify unit test

  

  sgmiller

  authored and

  miagilepner

  committed
  1efb012

  Copy full SHA for 1efb012

• improve const names

  

  sgmiller

  authored and

  miagilepner

  committed
  ab06b24

  Copy full SHA for ab06b24

• additional tests

  miagilepner

  committed
  2de2ecb

  Copy full SHA for 2de2ecb

• max answer size

  miagilepner

  committed
  b565747

  Copy full SHA for b565747

• add locking to prevent multiple new challenges

  miagilepner

  committed
  00b51c2

  Copy full SHA for 00b51c2

• remove log line

  miagilepner

  committed
  d30f8c7

  Copy full SHA for d30f8c7