[MESOS-2877] Allow libprocess firewall to have more control over the responses sent on failures

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.23.0
• Labels: mesosphere
• Assignee: Alexander Rojas
• Reporter: Alexander Rojas
• Shepherd: Till Toenshoff
• Created: 17/Jun/15 09:02
• Updated: 26/Nov/18 12:20
• Resolved: 26/Nov/18 12:20

Description

The libprocess firewall provides a powerful mechanism to control which requests are accepted based on the pair (socket, request).

However the firewall itself has no control over the responses sent when a request is rejected beyond a custom message. It always sent a 403 Forbidden error, however there are cases where the firewall could potentially send other kind of errors (think 401 Unauthorized if authorization is implemented).