[AMQ-3813] limit the number of producers and consumers created by a Connection

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.5.1
• Fix Version/s: 5.7.0
• Component/s: Broker
• Assignee: Robert Davies
• Reporter: Robert Davies
• Created: 20/Apr/12 09:50
• Updated: 09/May/12 09:11
• Resolved: 20/Apr/12 09:52

Description

Sometimes a rogue client can create an unlimited number of producers or consumers if not developed correctly. The client is in effect launching a denial of service attack on the broker - as it will eventually run out of memory, storing ProducerInfos and ConsumerInfos. This enhancement enables the number of consumers and producers to be limited per connection - by adding maximumProducersAllowedPerConnection and maximumConsumersAllowedPerConnection properties to the transport connector - e.g.

<amq:transportConnectors>
<amq:transportConnector uri="tcp://localhost:61631" maximumProducersAllowedPerConnection="5" maximumConsumersAllowedPerConnection="10"/>
</amq:transportConnectors>