I'm working on CASSANDRA-21755 to add default bounds and input validation for client STARTUP options.
To keep connection state clean and well-bounded, the patch introduces out-of-the-box limits: Max options entries: 64 (Configurable via cassandra.startup_client_option.max_count) Max key length: 256 bytes (Configurable via cassandra.startup_client_option.key_max_length) Max value length: 1024 bytes (Configurable via cassandra.startup_client_option.value_max_length) Input validation: Rejects control characters, newlines, and hidden formatting characters to keep operator views (nodetool clientstats, JMX) clean. These limits are enabled by default and fully configurable via system properties. Best, Rishabh On Fri, 23 Oct, 2026, 7:46 pm Rishabh Saraswat, <[email protected]> wrote: > Hello everyone, I am working on CASSANDRA-21756 which adds a timeout > for native connection to reach READY state in handshake. Timeout > starts when TCP connection is established and covers client's STARTUP > message and subsequent states. > The aim is to prevent idle connection from consuming server's resources. >
