HTHou opened a new pull request, #18569: URL: https://github.com/apache/iotdb/pull/18569
## Description Add minimum audit instrumentation for inter-node user-data transfer attempts, following the FDP_ITT.1 audit requirements from GB/T 20273-2019. This PR only adds audit event modeling, audit hooks, and routing through the existing audit logger. It does not introduce a new audit sink, persistence mechanism, protection mechanism, or policy implementation. ### Audit event model Each transfer attempt records: - timestamp and transfer type - initiator, source, and target endpoints - protection method and configured protection protocol - non-payload correlation context and attempt number - success or failure result - remote status code or exception class name Payload contents and exception messages are deliberately excluded. Audit failures are isolated from the data-transfer path, and audit-disabled paths return before constructing event objects. ### Instrumented transfer paths - cross-DataNode MPP TsBlock transfer, recorded by the pull initiator - cross-DataNode write dispatch when the plan tree contains an InsertNode - remote Load TsFile piece transfer - IoTConsensus log replication and snapshot fragment transfer - IoTConsensusV2 tablet and TsFile piece transfer ### Explicitly out of scope - Ratis transfer paths - AINode - ordinary query FragmentInstance or query-plan dispatch - SchemaRegion and ConfigRegion consensus transfer - heartbeats, control commands, delete events, and file seal signals - local in-process calls and general Pipe transfers <hr> This PR has: - [x] been self-reviewed. - [x] added Javadocs for the new audit event model. - [x] added comments explaining audit isolation and payload exclusion. - [x] added unit tests for event sanitization and InsertNode classification. - [ ] added integration tests. - [ ] been tested in a test IoTDB cluster. ### Verification - mvn spotless:apply -pl iotdb-core/node-commons,iotdb-core/consensus,iotdb-core/datanode - mvn compile -pl iotdb-core/datanode -am -DskipTests - mvn compile -pl iotdb-core/datanode -am -P with-zh-locale -DskipTests - node-commons targeted tests: 5 passed - DataNode targeted tests: 7 passed - IoTConsensusServerImpl targeted test: 1 passed <hr> ##### Key changed/added classes - UserDataTransferAuditEvent and related transfer enums/handler - AbstractAuditLogger - DataNodeUserDataTransferAuditor - SourceHandle - AsyncPlanNodeSender and AsyncSendPlanNodeHandler - FragmentInstanceDispatcherImpl - LoadTsFileDispatcherImpl - IoTConsensusServerImpl and DispatchLogHandler - IoTConsensusV2 async/sync sinks and response handlers -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
