Hi,

As a heavy Swarm Plugin user, I can say we don't use the discovery feature 
of the plugin, but rather direct the client to a specific master. This is 
due the fact we have several Jenkins masters in the same network (for 
testing purposes, mainly). I think the usage of the auto discovery feature 
is something people use only if they have a single instance of the master 
in their network, and this might be true only when using jenkins in a 
"dockerized" network.

If you have the capability to understand the usage of the plugin (with or 
without the discovery feature) I suggest you use it to make a better 
decision.



On Thursday, January 30, 2020 at 6:47:55 PM UTC+2, Jeff Thompson wrote:
>
> Hi,
>
> Dating back many years, Jenkins has supported two network discovery 
> services (UDP multicast/broadcast and DNS multicast). When this was first 
> implemented this may have been a reasonable way to provide useful lookup 
> services. With modern Jenkins capabilities, networks, and security 
> considerations, this is no longer a good mechanism. There are now other 
> ways to better accomplish pretty much everything this does.
>
> With Jenkins Security Advisory 2020-01-29 ( 
> https://jenkins.io/security/advisory/2020-01-29/ ) these services were 
> disabled by default because of 
> <https://issues.jenkins-ci.org/browse/SECURITY-1641> SECURITY-1641 / 
> CVE-2020-2100.
>
> The tests for these services have long been problematic because of various 
> system issues. They have never passed for me on my development machine and 
> others have reported the same. The issues are exacerbated with Java 11.
>
> We propose to remove these network discovery services. See 
> https://issues.jenkins-ci.org/browse/JENKINS-60913 and 
> https://github.com/jenkinsci/jenkins/pull/4460 .
>
> Please respond with any agreement or if you have any important 
> implementations that require these capabilities. Perhaps if this is still 
> needed, the capabilities could be pulled out of core into a plugin, 
> maintained by someone that uses it.
>
> Jeff Thompson
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/9ed19efd-a5fa-4264-ab62-1a95a2e5e16c%40googlegroups.com.

Reply via email to