This is an automated email from the ASF dual-hosted git repository.
github-actions[bot] pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/storm-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 5563ecedd9 publishing 2026-09-11T17:22:15+00:00
5563ecedd9 is described below
commit 5563ecedd9df6f8596d7f1be71a96d50fb83dc65
Author: GitHub Actions Bot <>
AuthorDate: Fri Sep 11 17:22:15 2026 +0000
publishing 2026-09-11T17:22:15+00:00
---
feed.xml | 4 ++--
security-model.html | 10 ++++++++++
2 files changed, 12 insertions(+), 2 deletions(-)
diff --git a/feed.xml b/feed.xml
index cfc8ee32bf..08c483dca7 100644
--- a/feed.xml
+++ b/feed.xml
@@ -5,8 +5,8 @@
<description>Apache Storm is a free and open source distributed realtime
computation system. Storm makes it easy to reliably process unbounded streams
of data, doing for realtime processing what Hadoop did for batch
processing.</description>
<link>https://storm.apache.org/</link>
<atom:link href="https://storm.apache.org/feed.xml"; rel="self"
type="application/rss+xml"/>
- <pubDate>Sun, 23 Aug 2026 20:15:28 +0000</pubDate>
- <lastBuildDate>Sun, 23 Aug 2026 20:15:28 +0000</lastBuildDate>
+ <pubDate>Fri, 11 Sep 2026 17:21:56 +0000</pubDate>
+ <lastBuildDate>Fri, 11 Sep 2026 17:21:56 +0000</lastBuildDate>
<generator>Jekyll v3.10.0</generator>
<item>
diff --git a/security-model.html b/security-model.html
index c716efc3ae..e09796a93f 100644
--- a/security-model.html
+++ b/security-model.html
@@ -275,6 +275,14 @@
<p>Storm supports TLS for Thrift RPC communication (Nimbus, Supervisors) and
Netty messaging (worker-to-worker) via mTLS. Enabling transport encryption is
recommended for deployments where network traffic may traverse untrusted
segments. The deprecated <code>BlowfishTupleSerializer</code> should not be
used; it employs a 64-bit block cipher vulnerable to birthday attacks.</p>
+<h2 id="availability-and-denial-of-service">Availability and Denial of
Service</h2>
+
+<p>Storm daemons are internal services and do not include defenses against
denial of service by clients that can reach their ports. This covers the Nimbus
and Supervisor Thrift ports, the worker messaging port, Pacemaker, and the HTTP
services listed above. A client with network access to these ports can exhaust
their resources, send malformed or oversized requests, or otherwise disrupt
them. Protecting the availability of the cluster relies on keeping these ports
reachable only from wit [...]
+
+<h3 id="pacemaker">Pacemaker</h3>
+
+<p>Pacemaker is deprecated and only kept for backward compatibility. It is
disabled by default. Its authentication (<code>pacemaker.auth.method</code>)
only protects reads of heartbeat data; as documented in <a
href="https://storm.apache.org/releases/current/Pacemaker.html";>Pacemaker</a>,
writes may be performed by any client that can reach the Pacemaker port.
Operators who still run Pacemaker must restrict its port to cluster hosts.</p>
+
<h2 id="test-utilities-in-production-jars">Test Utilities in Production
JARs</h2>
<p>Storm includes certain classes intended for development and testing (such
as <code>TestingFilter</code>) in its production JAR. These classes can be
enabled through <code>storm.yaml</code> configuration. Since
<code>storm.yaml</code> is a trusted input, the ability to enable test
utilities through configuration is not a security vulnerability; it is
equivalent to any other configuration change an administrator can make.
However, operators should be aware that misconfiguring these sett [...]
@@ -291,6 +299,8 @@
<li>Information disclosure through logs or API endpoints that are restricted
to trusted network access.</li>
<li>Enabling test utilities through configuration (which requires trusted
configuration access).</li>
<li>Version disclosure on internal endpoints.</li>
+<li>Denial of service by clients with network access to internal daemon ports
(Nimbus, Supervisor, worker messaging, Pacemaker, UI, Logviewer, DRPC),
including crashing or exhausting a daemon with malformed or excessive
requests.</li>
+<li>Unauthenticated writes to Pacemaker, which are documented behavior.</li>
</ul>
<p>The following <strong>are</strong> considered security vulnerabilities and
should be reported:</p>
