pomerium / pomerium / 20083459477

44%

Build Type

push

github

Committed by web-flow

Commit Message

ssh: refactor in-memory policy indexer (#5979)

This refactors some of the internals of the in-memory policy indexer to
properly account for multiple streams authorized to the same session,
but with different auth requests. Within a single session, upstream
tunnel authorized routes are evaluated and cached separately for each
unique AuthRequest within that session. If multiple streams connect and
have the same parameters in the AuthRequest, the cached routes will be
shared as expected.

There is a limit to how many different sets of authorized routes will be
cached (currently 5). If more streams with unique AuthRequests connect,
the oldest cached entries will be evicted.

Run Details

205 of 371 new or added lines in 3 files covered. (55.26%)

5 existing lines in 4 files now uncovered.

29394 of 55613 relevant lines covered (52.85%)

127.94 hits per line