Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-19581

[GSS](7.3.z) WFLY-13527 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 7.3.2.CR1, 7.3.2.GA
    • None
    • Undertow
    • None

    Description

      A standalone client application is calling EJBs on a backend server through an Undertow loadbalancer.

      The client looks like this:

              Properties props = new Properties();
        props.put(Context.INITIAL_CONTEXT_FACTORY, WildFlyInitialContextFactory.class.getName());
        props.put(Context.PROVIDER_URL, "http://10.0.0.1:9080/wildfly-services");
        props.put(Context.SECURITY_PRINCIPAL, "some-user");
        props.put(Context.SECURITY_CREDENTIALS, "some-password");

        InitialContext      ctx = new InitialContext(props);
        String name="ejb:/playground-jar/JBossManIntClientBean!org.jboss.playground.JBossManIntClient";
        JBossManIntClient bean = (JBossManIntClient) ctx.lookup(name);

      A client invoking the same EJB twice result in thousands of requests from the balancer to the backend servers, e. g.:

      • 13468 times: 
        INFO [io.undertow.accesslog] (default I/O-3) 10.0.0.1 - - [24/Sep/2019:12:03:03 +0200] "POST /wildfly-services/ejb/v1/invoke/-/playground-jar/-/JBossManIntClientBean/-/org.jboss.playground.JBossManIntClient/getHost HTTP/2.0" 401 77 "-" "-" Cookie: "-" Set-Cookie: "-" SessionID: - Thread: "default I/O-3" TimeTaken: 5063
      • 2 times: 
        INFO [io.undertow.accesslog] (default I/O-3) 10.0.0.1 - - [24/Sep/2019:12:06:53 +0200] "POST /wildfly-services/ejb/v1/invoke/-/playground-jar/-/JBossManIntClientBean/-/org.jboss.playground.JBossManIntClient/getHost HTTP/2.0" 200 155 "-" "-" Cookie: "-" Set-Cookie: "-" SessionID: - Thread: "default I/O-3" TimeTaken: 614

      Note: This behavior only occurs if there's more than a single backend server running in a cluster...

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. WFLY-13527 Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-18605 [GSS](7.3.z) WEJBHTTP-30 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-19590 (7.3.z) UNDERTOW-1716 - Allow colon in the request cookie value regardless of setting ALLOW_HTTP_SEPARATORS_IN_V0

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-19582 [GSS](7.2.z) WFLY-13527 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              rhn-support-ivassile Ilia Vassilev
              rhn-support-ivassile Ilia Vassilev
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: