Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Dear Ory Engineers and Kratos users, in my team we use a self-hosted Kratos with CockroachDB and we have noticed that in our current setup in production per each `kratos` pod it establishes ~60 TCP conns/s which seems a bit too many (our other workloads running on top of CockroachDB not written in Go leverage connections pools and establish a few magnitudes fewer connections). Should we provide any extra config values in our DB connection string to improve that? I also assume that partially because of that our in-cluster DNS traffic is also very high. Thanks in advance.

Could it perhaps be due to these argument passed via a connection string: `&amp;max_conns=16&amp;max_idle_conns=8` and simply those values are not enough.

Actually after changing the connection string and specifying the following params: `max_conns=50&amp;max_idle_conns=50&amp;max_conn_lifetime=10m&amp;max_conn_idle_time=10m` (which seems to be a good it for our current traffic but we may still need to fine tune those values) *the issue seems to be resolved* (both TCP new connections and DNS requests)