Details
-
Epic
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
-
Improve connection speed
Description
This is an umbrella task for features that improve connection speed and/or reduce number of roundtrips.
Currently connection with TLS 1.3 and PARSEC is done in the following steps:
- S→C, welcome packet, short nonce ("scramble")
- S←C, switch to TLS
- S←C, TLS 1.3 Hello
- S→C, TLS 1.3 Hello, ciphers, certificate
- S←C, TLS 1.3, Handshake finished
- S←C, username, password (native)
- S→C, switch to PARSEC, long nonce
- S←C, empty
- S→C, ext-salt
- S←C, password (parsec)
- S→C, ok packet
That's four round-trips. One is TLS related, one is caused by wrong initial auth plugin used, one by ext-salt, and one to actually deliver the password to the server and get the auth status back. The firs three are an unnecessary overhead.
When all tasks below are done, we'll have 1-roundtrip 3-packet auth as in MySQL 3.23, but with full TLS and PARSEC.
Attachments
Issue Links
- blocks
-
MDEV-40444 configurable default authentication plugin
-
- Open
-