Skip to content

feat: remove UDS auth#23

Merged
NathanFlurry merged 5 commits intonathan/warm-isolate-pool-v2from
nathan/remove-auth-add-benchmarks
Mar 20, 2026
Merged

feat: remove UDS auth#23
NathanFlurry merged 5 commits intonathan/warm-isolate-pool-v2from
nathan/remove-auth-add-benchmarks

Conversation

@NathanFlurry
Copy link
Member

Summary

  • Remove UDS auth flow: Token-based authentication over Unix domain socket is unnecessary — the socket dir has 0700 permissions + 128-bit random suffix. Removes SECURE_EXEC_V8_TOKEN, authenticate_connection, constant_time_eq, and related tests from both Rust and TS.
  • Burst + staggered benchmarks: New bench modes matching the computesdk pattern — burst fires N runtimes simultaneously, staggered launches with configurable delay + ramp profile.
  • Fix 15ms createNodeDriver() overhead: collectOverlayAllowedRoots does synchronous readdirSync + realpathSync on every symlink in node_modules (~20ms in large monorepos). Benchmarks and docs now reuse the driver instance.
  • Warm pool default increased to 5 for better p95 under staggered load.
  • IPC trace instrumentation: SECURE_EXEC_TRACE_IPC=1 env var enables per-execution phase timing on both TS and Rust sides.

Benchmark results (sequential cold start, 100 iterations)

p50 p95 p99
No pool 6.17ms 8.82ms 14.12ms
Pool of 5 4.02ms 5.55ms 6.23ms

Test plan

  • 128 TS tests pass (2 auth tests removed)
  • 82 Rust tests pass (7 auth/constant_time tests removed)
  • All three benchmarks run successfully (coldstart, burst, staggered)

🤖 Generated with Claude Code

NathanFlurry and others added 5 commits March 20, 2026 02:13
Auth over Unix domain socket is unnecessary — the socket dir has 0700
permissions and a random 128-bit suffix. Removes token generation,
SECURE_EXEC_V8_TOKEN env var, authenticate_connection, and related
tests from both Rust and TS sides.

Adds burst (all-at-once) and staggered (delayed ramp) TTI benchmarks
matching the computesdk pattern.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@NathanFlurry NathanFlurry changed the title feat: remove UDS auth, add burst/staggered benchmarks, fix cold start perf feat: fix cold start perf Mar 20, 2026
@NathanFlurry NathanFlurry changed the title feat: fix cold start perf feat: remove UDS auth Mar 20, 2026
@NathanFlurry NathanFlurry merged commit 81c3367 into nathan/warm-isolate-pool-v2 Mar 20, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant