You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@iotdb.apache.org by "yanze chen (Jira)" <ji...@apache.org> on 2022/11/17 07:35:00 UTC
[jira] [Created] (IOTDB-4970) [sync] Enhanced sync safety management
yanze chen created IOTDB-4970:
---------------------------------
Summary: [sync] Enhanced sync safety management
Key: IOTDB-4970
URL: https://issues.apache.org/jira/browse/IOTDB-4970
Project: Apache IoTDB
Issue Type: Improvement
Reporter: yanze chen
Assignee: yanze chen
Before the sync sender can send data, a handshake with the receiver is required. The current handshake policy is to verify the sender's IP address based on the receiver's white list. However, the current sender's ip address is provided by the sender and may be falsified leading to security issues.
# This ISSUE will get the ip address from the thrift connection.
# The default whitelist is set to 0.0.0.0/32, which rejects all the sender's ip.
# Some optimizations have been made to handle cases of handshake failure.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)