Page History

...

• Invoke an authN/authZ service, reusing the existing authN/authZ implementation in OpenWhisk
  • it may be possible to implement this inside the proxy itself. i.e. NGINX supports extensibility through lua thanks to Openresty.
• Routing
• Throttling 
  
  • Respect namespace limits
  • Respect Action level concurrency 
• Caching the response, based on what the action returns. I.e. an action that validates an OAuth token could instruct the system to cache the response for that token until the token expiration time.
• Support for Observability: Metrics, activation info, tracing, etc

Flow for warm container

1. The request arrives from a client
2. Authentication and Authorization
   1. The Action Router validates the Authorization header with OpenWhisk Auth Service
   2. The response of the Auth Service is cached 
3. Routing
   1. Check namespace limits
   2. Forward the request to the Action Container. 
4. An Action Proxy can front the action in order to:
   1. check action concurrency limit
   2. an overflow buffer could be used to accept a few more requests and queue them for processing 
5. Invoke the action and return the response

Flow for cold-start

TBD

Control Plane

Candidates:

• TBD

...