mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-31 20:39:37 +08:00
The HTTP client created by `auth.NewClient` has an idle timeout of 30s and each instance periodically gets cert authorities in `TeleportProcess.syncRotationStateCycle`. If there has been no activity when the ticker expires then the request will result in a brand new connection to Auth to be established. This can cause a spikes in open file descriptors on the Proxy when there are a large number of instances connected via a tunnel. To prevent periodic dialing when retrieving cert authorities the endpoint has been migrated to the new Trust gRPC service. For now only the get endpoint has been migrated but the rest of the CRUD operations for cert authorities should be migrated from the HTTP api to the gRPC service as well.