[NIFI-4603] NiFi HTTP header size should be configurable

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Component/s: Core Framework
• Assignee: Matt Burgess
• Reporter: Matt Burgess
• Created: 14/Nov/17 02:07
• Updated: 17/Mar/22 00:45
• Resolved: 15/Nov/17 09:15

Description

Currently, the max header size for NiFi HTTP requests and responses is hardcoded to 16 KB. This can cause issues when using SPNEGO and other mechanisms that pass large headers to/from NiFi. This can be improved by externalizing the setting to nifi.properties so the user may configure it to the appropriate size.

The current setting is at https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-web/nifi-jetty/src/main/java/org/apache/nifi/web/server/JettyServer.java#L112

Issue Links

• fixes: NIFI-4202 Add setRequestHeaderSize to restrict incoming request headers
• links to: GitHub Pull Request #2271