Zanzibar: Google’s Consistent, Global Authorization System
Talkat USENIX ATC '19 · on Wednesday, 2019-07-10· at 12:00· USENIX ATC Track I: Grand Ballroom I–VI·
summary
Global authorization system that stores and evaluates access control lists for hundreds of services, implemented on Spanner and a custom in-memory index, and deployed worldwide with several dozen replicas and ~10,000 servers. It enforces causal ordering using spanner commit timestamps, serves millions of checks per second over trillions of ACL entries, maintains 95th-percentile latency under 10 ms and >99.999% availability in production, and uses caching, hedged requests, and hot-spot mitigation to succeed.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:20Authorization checks are central to preserving privacy
- 1:03Zanzibar stores access control lists (ACLS)
- 1:56and performs authorization checks based on stored ACLS
- 2:30Zanzibar is.
- 7:21New enemy protection
- 8:42Consistency protocol
- 13:32Implementation techniques
- 15:31Deployment
- 16:04Check queries per second
- 17:09Check Safe latency
- 18:01Summary
related talks
40mHow Google Built a Consistent, Global Authorization System with Zanzibar
38mHow Google built a Consistent, Global Authorization System with Zanzibar
29mHow Google Built a Consistent, Global Authorization System with Zanzibar
16mAccess Granted with AuthZed
22mOrder And Consistency At Scale
33mGoogle Cloud Spanner: Global consistency at scale
01h 01mSpiceDB: Flexible Permissions Database for the Internet Era
47mGoogle Cloud Spanner: Global consistency at scale