[
https://issues.apache.org/jira/browse/GEODE-10371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17562995#comment-17562995
]
ASF GitHub Bot commented on GEODE-10371:
----------------------------------------
albertogpz merged PR #974:
URL: https://github.com/apache/geode-native/pull/974
> C++ Native client: Improve dispersion on connections expiration
> ---------------------------------------------------------------
>
> Key: GEODE-10371
> URL: https://issues.apache.org/jira/browse/GEODE-10371
> Project: Geode
> Issue Type: Improvement
> Components: native client
> Reporter: Alberto Gomez
> Assignee: Alberto Gomez
> Priority: Major
> Labels: pull-request-available
>
> The dispersion on connections expirations in the C++ native client works in
> such a way that it adds a dispersion (variance) between -9% and 9% over the
> time for a connection to expire due to load-conditioning so that, in the
> event of having many connections being created at the same, they do not
> expire at the right exact time.
> Nevertheless, the current implementation has two problems:
> - The randomness of the variance depends on the current time in seconds. As a
> result, for connections created in the same second, the variance will be the
> same and, therefore, the expiration time too.
> - The randomness is created using the C standard's library "rand()" function
> which is considered not secure.
> It is recommended to change the library used to generate the random variance
> to a secure one and also to make sure that for the time in seconds it does
> not return the same variance.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
