January 2024 Summaries

AuthZed's company culture is centered around the concept of "Trust each other," which enables employees to have agency and autonomy in their work, fostering collaboration, open-mindness, and a healthy tension that remains productive and actionable. As the company grows, they are committed to evolving their culture to meet the changing needs of their remote workforce and digital world, while maintaining a strong focus on building high-quality authorization products and tools.

SpiceDB load tests will prove that SpiceDB can meet performance targets and determine how much hardware is needed to achieve them. The performance characteristics of SpiceDB are nuanced, and relationship data distribution significantly impacts computational cost. Seeding relationships for a realistic load test is essential, taking into account the cardinality of relationships and their impact on fanout. Checks, lookups, and writes can have significant impacts on performance, with checks being less computationally expensive than lookups. The quantization interval setting determines how long cached results will live, and consistency has a significant effect on cache utilization. Load generation tooling, such as Thumper, can help distribute requests in a realistic manner. Monitoring SpiceDB metrics is crucial to fine-tune the load test, and scaling hardware up or out may be necessary depending on CPU utilization. The Authzed team offers assistance with schema review, script creation, trial access to SpiceDB Dedicated, and consultation services.

Authentication is the process of verifying an individual's identity, which can be done through one or more factors such as knowledge, ownership, or inherence. In computing, authentication has a long history dating back to the 1960s with the use of passwords and encryption. The future of authentication may become increasingly complicated due to advances in technology, requiring more secure and efficient methods to identify individuals. Authorization, on the other hand, is the process of granting permission to access resources within defined boundaries, which has become increasingly difficult for developers to implement, often causing performance issues. As technology advances, authorization systems are evolving towards dynamic, context-aware models that can adjust permissions in real-time, offering more secure and flexible access control mechanisms.