You’re right, akka-remoting still isn’t designed to be exposed to public internet. It’s something we’ll keep thinking about our multi-datacenter support work though.
-- Cheers, Konrad 'ktoso <http://kto.so>' Malawski Akka <http://akka.io/> @ Lightbend <http://lightbend.com/> On October 26, 2017 at 4:36:55, Alan McSherry ([email protected]) wrote: Hmmm....I could handle the encrypting. But ... https://stackoverflow.com/questions/22576020/akka-remote-over-the-internet ... I wonder if there are too many security holes or possible DDOS vectors in Akka, it's not really designed to operate in a hostile environment...(right ?) An attacker could 'lookup' or try to create remote actors at a rate I can't handle, and I want previously unknown nodes to be able to connect in order to perform a handshake and if they fail I can close the connection. I have a similar DDOS problem with Akka TCP but I know less about how friendly Akka remoting is to attackers. Ever come across someone using Akka remoting in an open internet type service...? On Wed, Oct 25, 2017 at 4:26 AM, Konrad “ktoso” Malawski < [email protected]> wrote: > What do you mean exactly? > Switch to using Artery (the “new” remoting)? You could, sure. > > Just remember that it’s not encrypted so going over internet may be a bad > idea if it has secure data. > We’re working on a TLS-ed version of Artery, but it would likely be over > TCP again. > > Though we know it should be faster than the previous implementation in any > case. > > -- > Cheers, > Konrad 'ktoso <http://kto.so>' Malawski > Akka <http://akka.io/> @ Lightbend <http://lightbend.com/> > > On October 24, 2017 at 3:59:30, Alan McSherry ([email protected]) > wrote: > > One of the building blocks of TCP is "slow start" and "slow start restart" > .... > > https://hpbn.co/building-blocks-of-tcp/#slow-start > > In particular for bursty applications "slow start restart" could be > hampering the performance of an Akka app by not using the full bandwidth > available at the time of the 'bursty' traffic. > > (I do not have any evidence that this is an issue for my scenario, it's > still in the design stage.) > > > 1. Anyone got links to case studies of this effect in their app? (Either > related to Akka TCP or Akka in general) > > 2. Are there any settings or machinery in Akka under the hood that > directly effect this "slow start restart"? > > I'm trying to determine is this a known handled thing or something we know > about and accept or something we don't need to worry about because I've > misunderstood it? > > Much thanks for reading! > > Alan. > > > > > -- > >>>>>>>>>> Read the docs: http://akka.io/docs/ > >>>>>>>>>> Check the FAQ: http://doc.akka.io/docs/akka/ > current/additional/faq.html > >>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user > --- > You received this message because you are subscribed to the Google Groups > "Akka User List" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/akka-user. > For more options, visit https://groups.google.com/d/optout. > > -- >>>>>>>>>> Read the docs: http://akka.io/docs/ >>>>>>>>>> Check the FAQ: >>>>>>>>>> http://doc.akka.io/docs/akka/current/additional/faq.html >>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user --- You received this message because you are subscribed to the Google Groups "Akka User List" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/akka-user. For more options, visit https://groups.google.com/d/optout.
