[jira] [Commented] (CLOUDSTACK-5723) Malfunction agent may block future SSL connection to the server

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-5723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13860833#comment-13860833 ] 

ASF subversion and git services commented on CLOUDSTACK-5723:
-------------------------------------------------------------

Commit 4312f9268e8fd911950f7fc38a7a3df5306ee060 in branch refs/heads/master from [~yasker]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=4312f92 ]

CLOUDSTACK-5723: Add timeout for SSL handshake

To prevent malfunction agent block the future SSL connections


> Malfunction agent may block future SSL connection to the server
> ---------------------------------------------------------------
>
>                 Key: CLOUDSTACK-5723
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5723
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Management Server
>    Affects Versions: 4.2.0, 4.3.0
>            Reporter: Sheng Yang
>            Assignee: Sheng Yang
>            Priority: Critical
>             Fix For: 4.2.1, 4.3.0
>
>
> If one agent failed to process the SSL handshake process, it would block the future incoming connections to mgmt server.
> Then all the future connection to the mgmt server would be hold infinitely until the malfunction agent exit.
> The reason is we use blocking mode in communication when try to do SSL handshake process, though we have mechanism to protect mgmt from malfunction agent who try to exchange handshake info too many times, we don't have mechanism on stop one agent didn't response the handshake.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)