fix: Walk auth events once instead of re-queueing parents #2276

Merged
nex merged 1 commit from eleboucher/continuwuity:fix/auth-event-walk-exponential into main 2026-09-22 19:28:46 +00:00
Contributor

The auth event walk re-queued an event together with its missing auth events, without checking if they were already queued. Each pass roughly doubles the queue, so a deep auth chain never finishes: it spams debug logs and eats RAM until you restart.

Now it just walks auth_events breadth-first and fetches each event once. Ordering is already done by build_local_dag afterwards.

Pull request checklist:

  • This pull request targets the main branch, and the branch is named something other than
    main.
  • I have written an appropriate pull request title and my description is clear.
  • I understand I am responsible for the contents of this pull request.
  • I have followed the contributing guidelines:
<!-- In order to help reviewers know what your pull request does at a glance, you should ensure that 1. Your PR title is a short, single sentence describing what you changed 2. You have described in more detail what you have changed, why you have changed it, what the intended effect is, and why you think this will be beneficial to the project. If you have made any potentially strange/questionable design choices, but didn't feel they'd benefit from code comments, please don't mention them here - after opening your pull request, go to "files changed", and click on the "+" symbol in the line number gutter, and attach comments to the lines that you think would benefit from some clarification. --> The auth event walk re-queued an event together with its missing auth events, without checking if they were already queued. Each pass roughly doubles the queue, so a deep auth chain never finishes: it spams debug logs and eats RAM until you restart. Now it just walks auth_events breadth-first and fetches each event once. Ordering is already done by build_local_dag afterwards. <!-- Example: This pull request allows us to warp through time and space ten times faster than before by double-inverting the warp drive with hyperheated jump fluid, both making the drive faster and more efficient. This resolves the common issue where we have to wait more than 10 milliseconds to engage, use, and disengage the warp drive when travelling between galaxies. --> <!-- Closes: #... --> <!-- Fixes: #... --> <!-- Uncomment the above line(s) if your pull request fixes an issue or closes another pull request by superseding it. Replace `#...` with the issue/pr number, such as `#123`. --> **Pull request checklist:** <!-- You need to complete these before your PR can be considered. If you aren't sure about some, feel free to ask for clarification in #dev:continuwuity.org. --> - [x] This pull request targets the `main` branch, and the branch is named something other than `main`. - [x] I have written an appropriate pull request title and my description is clear. - [x] I understand I am responsible for the contents of this pull request. - I have followed the [contributing guidelines][c1]: - [x] My contribution follows the [code style][c2], if applicable. - [x] I ran [pre-commit checks][c1pc] before opening/drafting this pull request. - [x] I have [tested my contribution][c1t] (or proof-read it for documentation-only changes) myself, if applicable. This includes ensuring code compiles. - [x] My commit messages follow the [commit message format][c1cm] and are descriptive. <!-- Notes on these requirements: - While not required, we encourage you to sign your commits with GPG or SSH to attest the authenticity of your changes. - While we allow LLM-assisted contributions, we do not appreciate contributions that are low quality, which is typical of machine-generated contributions that have not had a lot of love and care from a human. Please do not open a PR if all you have done is asked ChatGPT to tidy up the codebase with a +-100,000 diff. - In the case of code style violations, reviewers may leave review comments/change requests indicating what the ideal change would look like. For example, a reviewer may suggest you lower a log level, or use `match` instead of `if/else` etc. - In the case of code style violations, pre-commit check failures, minor things like typos/spelling errors, and in some cases commit format violations, reviewers may modify your branch directly, typically by making changes and adding a commit. Particularly in the latter case, a reviewer may rebase your commits to squash "spammy" ones (like "fix", "fix", "actually fix"), and reword commit messages that don't satisfy the format. - Pull requests MUST pass the `Checks` CI workflows to be capable of being merged. This can only be bypassed in exceptional circumstances. If your CI flakes, let us know in matrix:r/dev:continuwuity.org. - Pull requests have to be based on the latest `main` commit before being merged. If the main branch changes while you're making your changes, you should make sure you rebase on main before opening a PR. Your branch will be rebased on main before it is merged if it has fallen behind. - We typically only do fast-forward merges, so your entire commit log will be included. Once in main, it's difficult to get out cleanly, so put on your best dress, smile for the cameras! --> [c1]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md [c2]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/docs/development/code_style.mdx [c1pc]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#pre-commit-checks [c1t]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#running-tests-locally [c1cm]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#commit-messages
@ -640,0 +567,4 @@
// Queue this event's auth events. They are discovered by
// this same loop, and the whole result is topologically sorted
// below, so there's no need to hold this event back until they
// arrive.
Owner

I don't know, the point of pushing it to the back of the queue again is that it can just not be added to the discovered events map if its auth events are unfetchable (e.g. missing or unusable), I feel like this might leave us with a partial auth chain?
I suppose that might not be too bad when handle_outlier_pdu fetches the entire auth chain via the /event_auth/ federation endpoint if any of the auth events are missing. The important thing is all of the apex events can be fetched, since the PDU upgrade task uses this function to resolve the state at the incoming event after calling state_ids, and obviously we need a full state to be able to calculate the changes

I don't know, the point of pushing it to the back of the queue again is that it can just not be added to the discovered events map if its auth events are unfetchable (e.g. missing or unusable), I feel like this might leave us with a partial auth chain? I suppose that might not be too bad when `handle_outlier_pdu` fetches the entire auth chain via the `/event_auth/` federation endpoint if any of the auth events are missing. The important thing is all of the apex events can be fetched, since the PDU upgrade task uses this function to resolve the state at the incoming event after calling `state_ids`, and obviously we need a full state to be able to calculate the changes
Author
Contributor

Only when an ancestor is malformed: a missing auth event still fails the whole call, and a dependent of a malformed one now fails in handle_outlier_pdu after one extra /event_auth request instead of being dropped early, so it ends up in the same place and apex fetching is unchanged.

Only when an ancestor is malformed: a missing auth event still fails the whole call, and a dependent of a malformed one now fails in handle_outlier_pdu after one extra /event_auth request instead of being dropped early, so it ends up in the same place and apex fetching is unchanged.
Owner

Ah yeah that makes sense. There's a bit of a performance hit due to the expensive fallback to event_auth but the server is already in a Messed Up Situation™️ if it gets to that point anyway, so that's probably fine

Ah yeah that makes sense. There's a bit of a performance hit due to the expensive fallback to event_auth but the server is already in a Messed Up Situation:tm: if it gets to that point anyway, so that's probably fine
nex marked this conversation as resolved
eleboucher force-pushed fix/auth-event-walk-exponential from 8d478d8b6a
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 3s
Checks / Changelog / Check changelog is added (pull_request_target) Failing after 6s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m50s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m57s
to 6f305e7a1d
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 7s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m32s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-09-22 19:11:49 +00:00
Compare
eleboucher force-pushed fix/auth-event-walk-exponential from 6f305e7a1d
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 7s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m32s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to 8578f84af5
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 7s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 28s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m27s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-09-22 19:15:54 +00:00
Compare
nex approved these changes 2026-09-22 19:16:07 +00:00
nex scheduled this pull request to auto merge when all checks succeed 2026-09-22 19:16:39 +00:00
eleboucher force-pushed fix/auth-event-walk-exponential from 8578f84af5
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Prek / Check changed files (pull_request) Successful in 7s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 28s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m27s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
to cee69b4c8d
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Has been skipped
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 8s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m9s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m33s
Checks / Prek / Check changed files (push) Successful in 7s
Documentation / Build and Deploy Documentation (push) Successful in 1m3s
Checks / Prek / Pre-commit & Formatting (push) Successful in 1m9s
Checks / Prek / Clippy and Cargo Tests (push) Successful in 7m31s
Release Docker Image / Build linux-arm64 (release) (push) Successful in 19m3s
Release Docker Image / Build linux-amd64 (release) (push) Successful in 19m17s
Release Docker Image / Create Multi-arch Release Manifest (push) Successful in 15s
Release Docker Image / Build linux-amd64 (max-perf) (push) Successful in 35m1s
Release Docker Image / Build linux-arm64 (max-perf) (push) Successful in 38m54s
Release Docker Image / Release Binaries (push) Has been skipped
Release Docker Image / Create Max-Perf Manifest (push) Successful in 15s
Release Docker Image / Mirror Images (push) Failing after 2m49s
2026-09-22 19:20:01 +00:00
Compare
nex merged commit cee69b4c8d into main 2026-09-22 19:28:46 +00:00
nex deleted branch fix/auth-event-walk-exponential 2026-09-22 19:28:46 +00:00
Sign in to join this conversation.
No reviewers
nex
No milestone
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
continuwuation/continuwuity!2276
No description provided.