feat(rust): add one second cache for incoming and outgoing access con…

…trol

Cargo.toml

@@ -26,6 +26,7 @@ inherits = "test"
 debug = 1
 strip = "none"
 inherits = "release"
+force-frame-pointers = "yes"
 
 # compromise: minimal optimization on selected dependencies
 # to reduce cli bootstrap time by ~5x

implementations/rust/ockam/ockam_api/Cargo.toml

@@ -32,6 +32,7 @@ storage = ["ockam/storage"]
 aws-config = { version = "1.1.8", default-features = false, features = ["rustls"] }
 base64-url = "2.0.2"
 bytes = { version = "1.5.0", default-features = false, features = ["serde"] }
+cfg-if = "1.0.0"
 chrono = { version = "0.4" }
 colorful = "0.2"
 either = { version = "1.10.0", default-features = false }

implementations/rust/ockam/ockam_api/src/nodes/service.rs

@@ -249,7 +249,16 @@ impl NodeManager {
                     authority,
                 )
                 .await?;
-            Ok(Arc::new(policy_access_control))
+
+            cfg_if::cfg_if! {
+                if #[cfg(feature = "std")] {
+                    let cached_policy_access_control = ockam_core::access_control::CachedIncomingAccessControl::new(
+                        Box::new(policy_access_control));
+                    Ok(Arc::new(cached_policy_access_control))
+                } else {
+                    Ok(Arc::new(policy_access_control))
+                }
+            }
         } else {
             warn! {
                 resource_name = resource_name_str,

implementations/rust/ockam/ockam_core/src/access_control.rs

@@ -67,13 +67,17 @@ pub trait OutgoingAccessControl: Debug + Send + Sync + 'static {
 mod all;
 mod allow_all;
 mod any;
+#[cfg(feature = "std")]
+mod cache;
 mod deny_all;
 mod onward;
 mod source;
 
 pub use all::*;
 pub use allow_all::*;
 pub use any::*;
+#[cfg(feature = "std")]
+pub use cache::*;
 pub use deny_all::*;
 pub use onward::*;
 pub use source::*;