[ 
https://issues.apache.org/jira/browse/TS-3485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15245864#comment-15245864
 ] 

Susan Hinrichs commented on TS-3485:
------------------------------------

I think this one is fixed.  While addressing ts-3612, I added logic to 
Http2ClientSession that looks up and tests the acl_record in much the same way 
it was  being checked by HttpSessionAccept.  

I haven't had time to figure out this feature to test it beyond the default 
case (everything is allowed), but I think it should work.

SPDY behavior is unchanged however.

> We should honor ip_allow.config ACLs for HTTP/2 streams
> -------------------------------------------------------
>
>                 Key: TS-3485
>                 URL: https://issues.apache.org/jira/browse/TS-3485
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: HTTP/2
>            Reporter: Leif Hedstrom
>            Assignee: Susan Hinrichs
>             Fix For: 6.2.0
>
>
> From the comments:
> {code}
> // XXX we need to refactor the ACL checks from HttpSessionAccept so that we 
> can invoke them here, and also in
> // the SPDY protocol layer ...
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to