[ZOOKEEPER-4453] NettyServerCnxnFactory: allow to configure the early TLS connection drop feature

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.6.3
• Fix Version/s: 3.8.0, 3.7.1
• Component/s: server
• Labels: pull-request-available
• Assignee: Enrico Olivelli
• Reporter: Enrico Olivelli
• Created: 26/Jan/22 08:46
• Updated: 27/Jan/22 10:18
• Resolved: 27/Jan/22 10:18

Description

Follow up of ZOOKEEPER-3988.

We should introduce a flag to disable the feature introduced by ZOOKEEPER-3682.

Implementation

• Add new flag netty.server.earlyDropSecureConnectionHandshakes to control the ZOOKEEPER-3682 feature.

• Disable ZOOKEEPER-3682 by default, it is advanced feature, for very large clusters
• Add docs
• Add tests (also ZOOKEEPER-3682 missed tests, now we will have some)

Issue Links

• is related to: ZOOKEEPER-3988 org.apache.zookeeper.server.NettyServerCnxn.receiveMessage throws NullPointerException
• relates to: ZOOKEEPER-3682 Stop initializing new SSL connection if ZK server is shutting down
• links to: GitHub Pull Request #1799
• links to: GitHub Pull Request #1800