Context

As part of the lock-free serverStatus effort (SPM-4755), slow serverStatus sections contribute to FTDC gaps when collection exceeds 1 second. Analysis in SERVER-124926 and the slow serverStatus spreadsheet shows that the security section is a significant contributor. The spreadsheet data was collected from live Atlas clusters.

Owning team

Suggested owner (from CODEOWNERS): Security (@10gen/server-security)

Impact (from slow serverStatus logs)

• Tab: union (mongod + mongos) and mongos
• Total duration share: 2.3% (union), 2.0% (mongos) of slow-run section time
• Avg duration when slow: 92 ms (union), 345 ms (mongos)
• Rows where section exceeded 1s: 1.3% (union), 1.2% (mongos) of slow runs

Code location

• Section registration: ServerStatusSectionBuilder<Security>("security")
• Primary file: src/mongo/db/commands/server_status/server_status_security_servers.cpp

Task

Please audit the security serverStatus section and remove any unnecessary blocking work (locks, synchronous I/O, contended atomics, etc.).

Use SKUNK-40 branch for reference implementations and SKUNK-40-nonblocking for nonblocking annotations.

Acceptance criteria

• security section generation does not acquire blocking locks on the hot path
• No regression in section output for FTDC/default serverStatus collection
• Add or update tests if behavior changes

Related work

• Parent analysis: SERVER-124926