Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-7806

[Java Broker] [AMQP 1.0] Slow connection ticker should be running until OPEN performative is received or timeout expires

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: qpid-java-broker-7.0.0
    • Fix Version/s: qpid-java-broker-7.0.0
    • Component/s: Broker-J
    • Labels:
      None

      Description

      Slow connection ticker is running until one of the following condition is true:

      • authenticated subject is set on a connection
      • timeout expires

      In AMQP 1.0 connection the subject is set on finishing SASL negotiation before receiving AMQP header and OPEN performative. If authenticated client will not send AMQP header or/and OPEN performative (or sending of them will take unreasonably long of time) due to bug or malicious intention, the Broker might end up with not fully established connections consuming system resources. We need to protect Broker and run Slow connection ticker on AMQP 1.0 until OPEN is received and idle timeout is negotiated.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              alex.rufous Alex Rudyy
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: