Aias00 opened a new issue, #6759: URL: https://github.com/apache/shenyu/issues/6759
- severity: Medium - files: `shenyu-plugin/shenyu-plugin-fault-tolerance/shenyu-plugin-sentinel/src/main/java/org/apache/shenyu/plugin/sentinel/handler/SentinelRuleHandle.java:59-93` - description: `handlerRule` builds the new global rule set by `FlowRuleManager.getRules().stream().filter(...).collect(...)` then `flowRules.add(rule)` then `FlowRuleManager.loadRules(flowRules)`. This get→filter→load is not atomic across concurrent rule sync events: two concurrent invocations each snapshot the pre-existing rules and each add only their own new rule; the second `loadRules` overwrites the first. - impact: Concurrent rule create/update/remove events silently drop Sentinel flow/degrade rules. - suggested_fix: Serialize the get-filter-load sequence or use Sentinel's per-resource rule API. - confidence: Medium - related_existing: none — #4668 is a general optimization, not this specific race. --- _Identified during the 2026-08-02 deep re-scan; full list in [`docs/scan2-2026-08-02/06-medium-tiers.md`](docs/scan2-2026-08-02/06-medium-tiers.md)._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
