Andrew Sherman has uploaded this change for review. ( http://gerrit.cloudera.org:8080/22186
Change subject: WIP: IMPALA-13335: ignore duplicate ‘X-Forwarded-For’ headers ...................................................................... WIP: IMPALA-13335: ignore duplicate ‘X-Forwarded-For’ headers This change uses my in-review Impyla commit 14b7ec631753955400dd81a0f1bce55b14ebf1b4. That change needs to be in an alpha release of Impyla before this change can be pushed to master. When using the hs2-http protocol, Impala clients communicate with Impala by sending and receiving http messages. In a modern deployment environment like Kubernetes these http messages may travel through a series of http proxies. These proxies may record information about the path through the system in one or more ‘X-Forwarded-For’ http headers. At present Impala uses this header in various ways, (1) to skip Authentication for connection from a trusted domain, and (2) to record information about the origin of a query in the runtime profile. If there are multiple copies of the ‘X-Forwarded-For’ header then Impala should only use the first of these headers that it sees. For reference see details in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For TESTING Add a new test which uses a new Impyla mechanism to add multiple headers to its http messages. Change-Id: Iee7b452842aa391d285bd445d6a9e6cbbedd7fbb --- M be/src/transport/THttpServer.cpp M infra/python/deps/requirements.txt M tests/hs2/test_hs2.py 3 files changed, 30 insertions(+), 2 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/86/22186/1 -- To view, visit http://gerrit.cloudera.org:8080/22186 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: Iee7b452842aa391d285bd445d6a9e6cbbedd7fbb Gerrit-Change-Number: 22186 Gerrit-PatchSet: 1 Gerrit-Owner: Andrew Sherman <[email protected]>
