jbertram opened a new pull request #3934:
URL: https://github.com/apache/activemq-artemis/pull/3934


   JGroups 3.x hasn't been updated in some time now. The last release was
   in April 2020 almost 2 years ago. Since then there's been 35 releases
   from 4.x and 5.x. Lots of protocols have been updated and added and
   users are wanting to use them. Multiple Jiras have been opened to
   upgrade:
   
    - https://issues.apache.org/jira/browse/ARTEMIS-2413
    - https://issues.apache.org/jira/browse/ARTEMIS-2436
    - https://issues.apache.org/jira/browse/ARTEMIS-3066
   
   Notably, there is concern over the security of using older components
   triggered mainly by the recent Log4Shell vulnerability discovered in
   Log4j 2.x. The upgrade is meant to deal with all these issues.
   
   However, there is a cost associated with upgrading.
   
   The old-style properties configuration is no longer supported. I think
   it's unlikely that end-users are leveraging this because it is not
   exposed via broker.xml. The JGroups XML configuration has been around
   for a long time, is widely adopted, and is still supported. I expect
   most (if not all) users are using this. However, a handful of tests
   needed to be updated and/or removed to deal with this absence.
   
   Some protocols and/or protocol properties are no longer supported. This
   means that users may have to change their JGroups stack configurations
   when the upgrade. For example, our own clustered-jgroups example had to
   be updated or it wouldn't run properly.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to