[NIFI-7304] Default value for content length filter blocks Site to Site communication

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Fix Version/s: 1.12.0
• Component/s: Core Framework
• Labels: cluster filter http replication security site-to-site
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 31/Mar/20 21:36
• Updated: 14/Jul/20 20:31
• Resolved: 14/Jul/20 17:46

Description

When the content-length filter was introduced in NIFI-7153, it did not separate Site to Site (S2S) or cluster request replication requests from user-generated requests. With the default value of 20 MB, it is very likely that legitimate requests of this nature will be unexpectedly blocked.

The immediate fix is to change the default value in nifi.properties to empty and only enable this functionality when a value is provided.

A subtask will be opened to investigate if these requests should be excluded from the length limiting filter (either by convention or via an admin-enumerated exclusion list/setting).

Issue Links

• links to: GitHub Pull Request #4205
• links to: GitHub Pull Request #4206
• links to: GitHub Pull Request #4354