v0.34.0_2

src/proxy/request_id.rs

@@ -1,11 +1,10 @@
 fn request_id_hash(sequence: u64) -> String {
-    use rand::TryRng;
     use sha2::{Digest, Sha256};
 
-    let mut nonce = [0u8; 32];
-    let mut rng = rand::rngs::SysRng;
-    rng.try_fill_bytes(&mut nonce)
-        .expect("secure operating system random source unavailable");
+    // Thread-local CSPRNG is seeded (and periodically reseeded) from the OS.
+    // Do not make a getrandom syscall on the hot path for every HTTP request.
+    // Keep hashing the per-process sequence as before for the same ID format.
+    let nonce: [u8; 32] = rand::random();
     let mut hash = Sha256::new();
     hash.update(sequence.to_be_bytes());
     hash.update(nonce);