mieru Want a more efficient method of authentication

The current authentication method inevitably has some performance problems in scenarios with a large number of users Are you considering using other methods (such as RSA) in a future release to verify the user so that no matter how many users there are, it won't affect performance

Oct 10 '24 15:10 noxaaa

The ask is valid, but are you facing real performance problems?

A benchmark shows in my cheap VPS, it can handle 25k authentications computing per second. We also have the caching of authentication cipher blocks. So in real world I think the current implementation is able to scale up to 100k users per VPS.

Oct 11 '24 21:10 enfein

I'm just worried about this, I haven't put it into a real project yet, I'll test it later. There was another problem, I had to group the users because when handling too many users I got the following error set mita server config failed: rpc error: code = ResourceExhausted desc = grpc: received message larger than max (4977817 vs. 4194304)

Oct 11 '24 22:10 noxaaa

@satel-global I opened bug #166 to track the grpc error.

Oct 12 '24 02:10 enfein

Thanks

Oct 12 '24 03:10 noxaaa

Another concern I have is that if the attacker sends a large number of verification requests, it will immediately overload the server. Shadowsocks has the same problem.

Oct 13 '24 02:10 noxaaa

This issue is stale because it has been open 80 days with no activity. Remove stale label or comment or this will be closed in 9 days.

Jan 01 '25 04:01 github-actions[bot]