[HBASE-28138] Make the connection idle timeout configurable for the embedded HTTP servers

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha-4
• Fix Version/s: 2.6.0, 3.0.0-beta-1
• Assignee: qiuwei
• Reporter: qiuwei
• Created: 07/Oct/23 05:54
• Updated: 15/Oct/23 20:05
• Resolved: 12/Oct/23 10:44

Description

The Jetty Server may be slow HTTP denial of service attacks in hbase master web ui due to the default value of jetty connector idle timeout is 30000. This may cause such an attack.

Issue Links

• links to: GitHub Pull Request #5457