Chuck Rolke created DISPATCH-1288:
-------------------------------------
Summary: Optionally enforce access policy on connections
established by the router
Key: DISPATCH-1288
URL: https://issues.apache.org/jira/browse/DISPATCH-1288
Project: Qpid Dispatch
Issue Type: Bug
Components: Policy Engine
Affects Versions: 1.5.0
Reporter: Chuck Rolke
Assignee: Chuck Rolke
There are cases where router-initiated connections to external processes (using
connectors) need to have enforcement of access policy from the external
container.
That is, when an outbound connection is created by a connector then there is
nothing to prevent that external remote container from opening links to any
address like, for instance, $management.
In the normal case policy is applied only to inbound connections. This issue
covers the case where policy must be applied to outbound connections.
Like the normal policy case, the connector policy will be applied to incoming
link creation requests initiated by the external container. Outbound link
creation requests initiated by the router are exempt from policy restrictions.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
