))
Zanzibar: Google's Global Authorization System
Manage episode 487366626 series 3670304
Contenuto fornito da The Binary Breakdown. Tutti i contenuti dei podcast, inclusi episodi, grafica e descrizioni dei podcast, vengono caricati e forniti direttamente da The Binary Breakdown o dal partner della piattaforma podcast. Se ritieni che qualcuno stia utilizzando la tua opera protetta da copyright senza la tua autorizzazione, puoi seguire la procedura descritta qui https://it.player.fm/legal.
This paper details Zanzibar, Google's globally distributed authorization system, designed to manage access control lists (ACLs) at a massive scale. Zanzibar uses a flexible data model and configuration language to handle diverse access control policies for numerous Google services, achieving high availability and low latency. The system maintains external consistency, respecting the causal order of ACL changes, and employs techniques like caching and request hedging to handle high request volumes and hot spots. The authors present the system's architecture, implementation, and lessons learned from years of operation, highlighting challenges and solutions in building a consistent, world-scale authorization system. The paper also explores related research in access control and distributed systems.
https://www.usenix.org/system/files/atc19-pang.pdf
44 episodi
Condividi
