[CASSANDRA-16859] allow blocking IPs from updating metrics about traffic

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 4.1-alpha1, 4.1
• Component/s: Observability/Metrics
• Change Category: Operability
• Complexity: Low Hanging Fruit
• Platform: All

Source Control Link

https://github.com/apache/cassandra/commit/7a7710a6c6fe7d53a23d5661c0fd1b5e8baafbf9

Test and Documentation Plan

unit test and cluster testing

• Assignee: David Capwell
• Reporter: David Capwell

Authors

David Capwell

Reviewers

Benjamin Lerer, Caleb Rackliffe, Jon Meredith

• Created: 16/Aug/21 23:15
• Updated: 01/Nov/22 20:09
• Resolved: 21/Aug/21 00:24

Description

It is common that network scans happen for some companies, and when these scans happen they will send packets to the Cassandra ports which do not match our protocol; when this happens we fail and increment metrics to show this. To avoid these scans polluting our metrics, we should allow users to block their own IP subnets from updating these metrics.

Issue Links

• causes: CASSANDRA-17026 UnableToParseClientMessageFromBlockedSubnetTest.badMessageCausesProtocolExceptionFromExcludeList failing on extra log entries
• causes: CASSANDRA-18002 Update NetBeans project file for dependency changes since 7th July 2021
• links to: Circle CI: trunk
• links to: GH PR: trunk