Skip to content

feat(bigtable): authenticate accelerator RPCs with a per-daemon stdin handshake secret - #5

Open
mutianf wants to merge 1 commit into
accel-04-verify-daemon-identityfrom
accel-05-stdin-handshake-secret
Open

feat(bigtable): authenticate accelerator RPCs with a per-daemon stdin handshake secret#5
mutianf wants to merge 1 commit into
accel-04-verify-daemon-identityfrom
accel-05-stdin-handshake-secret

Conversation

@mutianf

@mutianf mutianf commented Aug 7, 2026

Copy link
Copy Markdown
Owner

Stack PR 5/7 — base: accel-04-verify-daemon-identity

Mints a 256-bit secret written to the daemon's stdin at startup and sends it as x-accelerator-token metadata on every RPC, so only the spawning client can call the daemon.


Accelerator stack

  1. daemon subprocess wrapper
  2. route read_row and mutate_row through daemon
  3. forward auth/identity config to daemon
  4. verify daemon identity before routing
  5. authenticate RPCs with stdin handshake secret
  6. pass Python client version for User-Agent
  7. package prebuilt daemon into wheel

@mutianf
mutianf force-pushed the accel-05-stdin-handshake-secret branch from 5819e44 to 0fab8a3 Compare August 10, 2026 16:38
@mutianf
mutianf force-pushed the accel-05-stdin-handshake-secret branch from 0fab8a3 to e759297 Compare August 10, 2026 17:59
@mutianf
mutianf force-pushed the accel-05-stdin-handshake-secret branch from e759297 to 0722e6b Compare August 11, 2026 14:07
… handshake secret

Change-Id: I643887ab5cd4b8e3b2b745626ee4caf0acd1db71
@mutianf
mutianf force-pushed the accel-05-stdin-handshake-secret branch from 0722e6b to 0612a87 Compare August 11, 2026 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant