[
https://issues.apache.org/jira/browse/HBASE-28138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17773505#comment-17773505
]
Wellington Chevreuil commented on HBASE-28138:
----------------------------------------------
Hi [~qiuwei6], thanks for filing up this ticket. I have added you to the list
of HBase contributors and assigned this jira for you. Please submit a github
pull request with your fix, as this is the way the HBase community works for
reviewing contributions. Also, you may want to look at the RS UI as well.
Thanks,
Wellington,
> Slow HTTP Denial of Service Attack of HBase Master web UI
> ---------------------------------------------------------
>
> Key: HBASE-28138
> URL: https://issues.apache.org/jira/browse/HBASE-28138
> Project: HBase
> Issue Type: Improvement
> Affects Versions: 3.0.0-alpha-4
> Reporter: qiuwei
> Assignee: qiuwei
> Priority: Minor
> Fix For: 3.0.0-beta-1
>
> Attachments:
> 0001-HBASE-28138-Slow-HTTP-Denial-of-Service-Attack-of-HB.patch
>
>
> The Jetty Server may be slow HTTP denial of service attacks in hbase master
> web ui due to the default value of jetty connector idle timeout is 30000.
> This may cause such an attack.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
