Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-1545 [Umbrella] Prevent DoS of YARN components by putting in limits
  3. YARN-1546

Prevent DoS of ApplicationClientProtocol by putting in limits

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • None
    • None

    Description

      Points of DoS in ApplicationClientProtocol

      • Get new AppId: App IDs are ints and so can be exhausted.
      • Unbounded submit-app playload: queueName, ContainerLaunchContext fields etc in ApplicationSubmissionContext
      • Unbounded byte-buffers as part of tokens during renew/cancel Delegation Token

      Attachments

        Issue Links

          relates to

          Sub-task - The sub-task of the issue YARN-5411 Create a proxy chain for ApplicationClientProtocol in the Router

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              vinodkv Vinod Kumar Vavilapalli
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: