You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by "C. Scott Andreas (JIRA)" <ji...@apache.org> on 2018/11/19 01:31:00 UTC

[jira] [Updated] (CASSANDRA-14236) C* should gradually recycle open connections after hot reloading SSL Certificates

     [ https://issues.apache.org/jira/browse/CASSANDRA-14236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

C. Scott Andreas updated CASSANDRA-14236:
-----------------------------------------
    Component/s: Streaming and Messaging

> C* should gradually recycle open connections after hot reloading SSL Certificates
> ---------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-14236
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-14236
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Streaming and Messaging
>            Reporter: Dinesh Joshi
>            Assignee: Dinesh Joshi
>            Priority: Minor
>              Labels: security
>
> Currently the way SSL certificate hot reloading is implemented, it only applies the new certificates to new connections. Open connections are not terminated. Immediate termination of these connections is undesirable as it will cause a thundering herd problem. We need a way to gradually drain existing connections so that the new SSL certificates are used by all connections.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org