[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication
[
https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7304:
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Default value for content length filter blocks Site to Site communication
> -
>
> Key: NIFI-7304
> URL: https://issues.apache.org/jira/browse/NIFI-7304
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Blocker
> Labels: cluster, filter, http, replication, security,
> site-to-site
> Fix For: 1.12.0
>
> Time Spent: 2h
> Remaining Estimate: 0h
>
> When the content-length filter was introduced in NIFI-7153, it did not
> separate Site to Site (S2S) or cluster request replication requests from
> user-generated requests. With the default value of 20 MB, it is very likely
> that legitimate requests of this nature will be unexpectedly blocked.
> The immediate fix is to change the default value in {{nifi.properties}} to
> empty and only enable this functionality when a value is provided.
> A subtask will be opened to investigate if these requests should be excluded
> from the length limiting filter (either by convention or via an
> admin-enumerated exclusion list/setting).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication
[
https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joe Witt updated NIFI-7304:
---
Fix Version/s: 1.12.0
> Default value for content length filter blocks Site to Site communication
> -
>
> Key: NIFI-7304
> URL: https://issues.apache.org/jira/browse/NIFI-7304
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Blocker
> Labels: cluster, filter, http, replication, security,
> site-to-site
> Fix For: 1.12.0
>
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> When the content-length filter was introduced in NIFI-7153, it did not
> separate Site to Site (S2S) or cluster request replication requests from
> user-generated requests. With the default value of 20 MB, it is very likely
> that legitimate requests of this nature will be unexpectedly blocked.
> The immediate fix is to change the default value in {{nifi.properties}} to
> empty and only enable this functionality when a value is provided.
> A subtask will be opened to investigate if these requests should be excluded
> from the length limiting filter (either by convention or via an
> admin-enumerated exclusion list/setting).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication
[
https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7304:
Status: Patch Available (was: In Progress)
> Default value for content length filter blocks Site to Site communication
> -
>
> Key: NIFI-7304
> URL: https://issues.apache.org/jira/browse/NIFI-7304
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Blocker
> Labels: cluster, filter, http, replication, security,
> site-to-site
> Time Spent: 40m
> Remaining Estimate: 0h
>
> When the content-length filter was introduced in NIFI-7153, it did not
> separate Site to Site (S2S) or cluster request replication requests from
> user-generated requests. With the default value of 20 MB, it is very likely
> that legitimate requests of this nature will be unexpectedly blocked.
> The immediate fix is to change the default value in {{nifi.properties}} to
> empty and only enable this functionality when a value is provided.
> A subtask will be opened to investigate if these requests should be excluded
> from the length limiting filter (either by convention or via an
> admin-enumerated exclusion list/setting).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication
[
https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7304:
Summary: Default value for content length filter blocks Site to Site
communication (was: content-length filter)
> Default value for content length filter blocks Site to Site communication
> -
>
> Key: NIFI-7304
> URL: https://issues.apache.org/jira/browse/NIFI-7304
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Blocker
> Labels: cluster, filter, http, replication, security,
> site-to-site
>
> When the content-length filter was introduced in NIFI-7153, it did not
> separate Site to Site (S2S) or cluster request replication requests from
> user-generated requests. With the default value of 20 MB, it is very likely
> that legitimate requests of this nature will be unexpectedly blocked.
> The immediate fix is to change the default value in {{nifi.properties}} to
> empty and only enable this functionality when a value is provided.
> A subtask will be opened to investigate if these requests should be excluded
> from the length limiting filter (either by convention or via an
> admin-enumerated exclusion list/setting).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7304) Default value for content length filter blocks Site to Site communication
[
https://issues.apache.org/jira/browse/NIFI-7304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7304:
Priority: Blocker (was: Major)
> Default value for content length filter blocks Site to Site communication
> -
>
> Key: NIFI-7304
> URL: https://issues.apache.org/jira/browse/NIFI-7304
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Blocker
> Labels: cluster, filter, http, replication, security,
> site-to-site
>
> When the content-length filter was introduced in NIFI-7153, it did not
> separate Site to Site (S2S) or cluster request replication requests from
> user-generated requests. With the default value of 20 MB, it is very likely
> that legitimate requests of this nature will be unexpectedly blocked.
> The immediate fix is to change the default value in {{nifi.properties}} to
> empty and only enable this functionality when a value is provided.
> A subtask will be opened to investigate if these requests should be excluded
> from the length limiting filter (either by convention or via an
> admin-enumerated exclusion list/setting).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
