Assign nonce prefixes for each nonce-service by taking the first eight characters of the the base64url encoded HMAC-SHA256 hash of the RPC listening address using a provided key. The provided key must be same across all boulder-wfe and nonce-service instances. - Add a custom `grpc-go` load balancer implementation (`nonce`) which can route nonce redemption RPC messages by matching the prefix to the derived prefix of the nonce-service instance which created it. - Modify the RPC client constructor to allow the operator to override the default load balancer implementation (`round_robin`). - Modify the `srv` RPC resolver to accept a comma separated list of targets to be resolved. - Remove unused nonce-service `-prefix` flag. Fixes #6404 |
||
|---|---|---|
| .. | ||
| creds | ||
| internal | ||
| noncebalancer | ||
| test_proto | ||
| client.go | ||
| client_test.go | ||
| errors.go | ||
| errors_test.go | ||
| generate.go | ||
| interceptors.go | ||
| interceptors_test.go | ||
| pb-marshalling.go | ||
| pb-marshalling_test.go | ||
| protogen.sh | ||
| resolver.go | ||
| resolver_test.go | ||
| server.go | ||