New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ES APM traces for HTTP requests include authn duration #96205
Merged
albertzaharovits
merged 5 commits into
elastic:main
from
albertzaharovits:APM_tracing_for_authn
May 18, 2023
Merged
ES APM traces for HTTP requests include authn duration #96205
albertzaharovits
merged 5 commits into
elastic:main
from
albertzaharovits:APM_tracing_for_authn
May 18, 2023
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
albertzaharovits
changed the title
APM tracer start time
ES APM trace for HTTP request includes authn duration
May 18, 2023
albertzaharovits
changed the title
ES APM trace for HTTP request includes authn duration
ES APM traces for HTTP requests include authn duration
May 18, 2023
albertzaharovits
added
>non-issue
:Core/Infra/Core
Core issues without another label
:Security/Authentication
Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc)
labels
May 18, 2023
elasticsearchmachine
added
Team:Core/Infra
Meta label for core/infra team
Team:Security
Meta label for security team
labels
May 18, 2023
Pinging @elastic/es-security (Team:Security) |
Pinging @elastic/es-core-infra (Team:Core/Infra) |
pugnascotia
approved these changes
May 18, 2023
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
DaveCTurner
added a commit
to DaveCTurner/elasticsearch
that referenced
this pull request
Aug 1, 2023
In elastic#96205 we started recording the start time of the authn phase of REST request processing, because this happens too early to even start a span for the request. However we capture the threadpool's cached time which can be 200ms slow, yielding spans that appear much longer than they should. This commit moves to capturing the time using `System.currentTimeMillis` to avoid this problem.
DaveCTurner
added a commit
that referenced
this pull request
Aug 2, 2023
In #96205 we started recording the start time of the authn phase of REST request processing, because this happens too early to even start a span for the request. However we capture the threadpool's cached time which can be 200ms slow, yielding spans that appear much longer than they should. This commit moves to capturing the time using `System.currentTimeMillis` to avoid this problem.
DaveCTurner
added a commit
that referenced
this pull request
Aug 2, 2023
In #96205 we started recording the start time of the authn phase of REST request processing, because this happens too early to even start a span for the request. However we capture the threadpool's cached time which can be 200ms slow, yielding spans that appear much longer than they should. This commit moves to capturing the time using `System.currentTimeMillis` to avoid this problem. Backport of #98113 to 8.9
felixbarny
pushed a commit
to felixbarny/elasticsearch
that referenced
this pull request
Aug 3, 2023
In elastic#96205 we started recording the start time of the authn phase of REST request processing, because this happens too early to even start a span for the request. However we capture the threadpool's cached time which can be 200ms slow, yielding spans that appear much longer than they should. This commit moves to capturing the time using `System.currentTimeMillis` to avoid this problem.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
:Core/Infra/Core
Core issues without another label
>non-issue
:Security/Authentication
Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc)
Team:Core/Infra
Meta label for core/infra team
Team:Security
Meta label for security team
v8.9.0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Following the changes in #95112, which relocated the calls into the
AuthenticationService
that authenticate HTTP requests, the authentication duration was no longer comprised in between theTracer#startTrace
andTracer#stopTrace
. Consequently, the span records didn't cover the authentication duration any longer.This PR remedies that by changing the
Tracer
implementation, i.e.APMTracer
, to look for the trace start time instant in the transient thread context and use that when starting traces (overriding thenow
default). The trace start time is set in the thread context when the request-wise thread context is first populated (with HTTP request headers).