OpenXACML Status

[Leif Johansson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/18/2012 07:11 PM, Chad La Joie wrote:
> First of all, a good implementation of a PDP (or really any rules
> engine that handles arbitrarily complex rules) is *not* a simple
> thing.  Or perhaps I should say, it's not easy to develop one that
> isn't glacially slow.
> 
> I would therefore, *strongly* encourage you to participate in the 
> HERAS[1] project and work on their codebase.  I used it years ago
> and performance was decent as they had already been through a
> couple evaluation optimization phases.  That said, there is still a
> lot more that could be done both to increase performance and to
> improve flexibility/extensibility.
> 
> [1] http://herasaf.org/
> 

I know this is slightly off-topic but I think SPOCP had something
like a SAML PDP frontend once (but I may be miss-remembering) and
SPOCP could do 20k+ rule evaluations per second over 10 years ago.

IF performance is a real issue (and perhaps more so than XACML)
then talk to Roland about resurrecting SPOCP...

	Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+2hZUACgkQ8Jx8FtbMZncD3ACgjUs2ooJ/faG5Vm0zSpS5Gmja
KcIAn0CwHqV/xa4M1hu1Sthlq1CdHl0I
=0Luf
-----END PGP SIGNATURE-----