[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication

["Andy LoPresto (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andy LoPresto updated NIFI-7304:
--------------------------------
    Summary: Default value for content length filter blocks Site to Site communication  (was: content-length filter)

> Default value for content length filter blocks Site to Site communication
> -------------------------------------------------------------------------
>
>                 Key: NIFI-7304
>                 URL: https://issues.apache.org/jira/browse/NIFI-7304
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>    Affects Versions: 1.12.0
>            Reporter: Andy LoPresto
>            Assignee: Andy LoPresto
>            Priority: Blocker
>              Labels: cluster, filter, http, replication, security, site-to-site
>
> When the content-length filter was introduced in NIFI-7153, it did not separate Site to Site (S2S) or cluster request replication requests from user-generated requests. With the default value of 20 MB, it is very likely that legitimate requests of this nature will be unexpectedly blocked. 
> The immediate fix is to change the default value in {{nifi.properties}} to empty and only enable this functionality when a value is provided. 
> A subtask will be opened to investigate if these requests should be excluded from the length limiting filter (either by convention or via an admin-enumerated exclusion list/setting). 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)