Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to using Tokio (or other async framework) #97

Closed
hillu opened this issue Sep 1, 2022 · 1 comment
Closed

Switch to using Tokio (or other async framework) #97

hillu opened this issue Sep 1, 2022 · 1 comment
Milestone

Comments

@hillu
Copy link
Collaborator

hillu commented Sep 1, 2022

So far, Laure's mode of operation has been pretty linear:
Reaad auditd record from stdin, parse, coalesce, transform, enrich, output, repeat.

Any extra I/O it had to do had to do with reading from /proc. This worked fine as long as the only other entity involved was the Linux kerrnel, but that is going to change as we will want to add information provided by container runtimes or other sources.

Async I/O would be useful to avoid backpressure causing auditd to stop sending events on systems with high load. It would also be useful for socket-based output channels.

@hillu
Copy link
Collaborator Author

hillu commented Dec 3, 2022

Just sprinkling async and await all across the codebase will not work since it would incur a large performance hit. (Tried that, measured it, ,abandoned the idea.)

@hillu hillu closed this as completed Dec 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant