You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@iotdb.apache.org by "yanze chen (Jira)" <ji...@apache.org> on 2022/11/17 07:35:00 UTC

[jira] [Created] (IOTDB-4970) [sync] Enhanced sync safety management

yanze chen created IOTDB-4970:
---------------------------------

             Summary: [sync] Enhanced sync safety management
                 Key: IOTDB-4970
                 URL: https://issues.apache.org/jira/browse/IOTDB-4970
             Project: Apache IoTDB
          Issue Type: Improvement
            Reporter: yanze chen
            Assignee: yanze chen


Before the sync sender can send data, a handshake with the receiver is required. The current handshake policy is to verify the sender's IP address based on the receiver's white list. However, the current sender's ip address is provided by the sender and may be falsified leading to security issues.

 
 # This ISSUE will get the ip address from the thrift connection.
 # The default whitelist is set to 0.0.0.0/32, which rejects all the sender's ip.
 # Some optimizations have been made to handle cases of handshake failure.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)