Skip to content

bench: the group distributor scale bench (DESIGN_E2E_SEALED_PUBSUB §13 #7) - #94

Open
rgfaber wants to merge 1 commit into
mainfrom
bench-group-distributor
Open

rgfaber wants to merge 1 commit into
mainfrom
bench-group-distributor

Conversation

@rgfaber

@rgfaber rgfaber commented Oct 11, 2026

Copy link
Copy Markdown
Contributor

The first measured numbers for the register's §13 #7: rotation CPU and reply bytes at n = 1,000 and 10,000 members, both profiles, with the real default membership path (realm-signed endorsement verified per pull) and the link-layer costs §6.3 prices a sealed pull at.

Measured (OTP 28, host00, one core):

handler/pull link-layer/pull (sign + decap + ucan) rotation @1k rotation @10k §6.3 estimate @1k / @10k
pq_pure 0.25 ms 0.9 + 0.17 + 2.5 ms ~4.1 s ~44 s 1.3 s / 13 s
pq_hybrid 0.47 ms 6.1 + 0.17 + 3.6 ms ~10.5 s ~111 s 5.5 s / 55 s

The signature and KEM terms match the estimate; the UCAN authorize is the delta: 2.5-4.2 ms where §6.3 assumed ~0.31 ms for the CALL verify. Corrected, a 10,000-member EU rotation is ~111 s of distributor CPU (12% of one core at the 15-minute bound), not 55 s.

Known exclusions, stated in the bench: the DHT lookup I/O per pull (latency, station-bounded by D28 budgets, not distributor CPU), wire encoding (term_to_binary proxy for reply bytes), and the jittered re-pull's spread (totals are aggregates, not bursts).

Run: scripts/bench-group-distributor.sh (env N1/N2), after rebar3 as test compile.

…#7)

Measures, at n = 1,000 and 10,000 members, both profiles: per-pull
handler CPU with the REAL default membership (realm-signed endorsement
verified every pull through the injectable lookup), rotation reply
bytes, the link-layer costs §6.3 prices a sealed pull at (signed
RESULT, KEM decapsulation, UCAN authorize), and publish/open per event.

Measured (OTP 28, host00): the handler is ~0.25 ms (pq_pure) and
~0.47 ms (pq_hybrid) per pull; the link layer dominates at ~0.9 + 0.17
+ 2.5 ms (pure) and ~6.1 + 0.17 + 3.6 ms (hybrid). Full rotation:
~4.1 s / ~10.5 s at 1k and ~44 s / ~111 s at 10k, against §6.3's
1.3 / 5.5 s and 13 / 55 s. The signature and KEM terms match the
estimate; the UCAN authorize is the delta, costing 2.5-4.2 ms where
§6.3 assumed ~0.31 ms. The register's numbers should cite these.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant