Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-9481

Exclude HTTP Site-to-Site Communication from DoS Filter

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.16.0
    • Core Framework, Security
    • None

    Description

      The Jetty Denial of Service Filter introduced in NiFi 1.12.0 applied rate limiting and processing timeouts to all HTTP requests that NiFi received through Jetty. This approach created potential problems when sending and receiving files using Site-to-Site over HTTP, prompting the introducing of configurable request timeout properties in NiFi 1.14.0.

      Although configuring a large request timeout mitigates most issues, HTTP Site-to-Site transmission with high data volumes can make it difficult to select an optimal value for the request timeout property. Excluding specific Site-to-Site HTTP REST resource methods from request timeout filtering avoids potential problems on deployments with large volumes of data or transmission over slow network links.

      Attachments

        Issue Links

          Activity

            People

              exceptionfactory David Handermann
              exceptionfactory David Handermann
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 50m
                  50m