Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
0.9.0
-
None
Description
Brooklyn 0.9.0-SNAPSHOT requires a connection to the public Internet to work. This is a regression from Brooklyn 0.8.0.
This is an issue when Brooklyn is launched into secured server environments. It is common in many corporations that production servers have restricted egress access to the public Internet. Therefore this is a major issue.
The issue appears to be that Jetty is using Xerces to parse XML files; Xerces is trying to resolve the DTDs by downloading them from the URL in the XML header. Therefore, it will be trying to access http://java.sun.com. When this operation fails, the root webapp is not deployed, and the Brooklyn web console (and probably the REST API too) returns 503 Service Unavailable.