Uploaded image for project: 'WildFly EJB HTTP Client'
  1. WildFly EJB HTTP Client
  2. WEJBHTTP-30

Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 1.0.19.Final, 1.1.2.Final
    • 1.0.16.Final
    • None

    Description

      A standalone client application is calling EJBs on a backend server through an Undertow loadbalancer.

      The client looks like this:

              Properties props = new Properties();
        props.put(Context.INITIAL_CONTEXT_FACTORY, WildFlyInitialContextFactory.class.getName());
        props.put(Context.PROVIDER_URL, "http://10.0.0.1:9080/wildfly-services");
        props.put(Context.SECURITY_PRINCIPAL, "some-user");
        props.put(Context.SECURITY_CREDENTIALS, "some-password");

        InitialContext      ctx = new InitialContext(props);
        String name="ejb:/playground-jar/JBossManIntClientBean!org.jboss.playground.JBossManIntClient";
        JBossManIntClient bean = (JBossManIntClient) ctx.lookup(name);

      A client invoking the same EJB twice result in thousands of requests from the balancer to the backend servers, e. g.:

      • 13468 times: 
        INFO [io.undertow.accesslog] (default I/O-3) 10.0.0.1 - - [24/Sep/2019:12:03:03 +0200] "POST /wildfly-services/ejb/v1/invoke/-/playground-jar/-/JBossManIntClientBean/-/org.jboss.playground.JBossManIntClient/getHost HTTP/2.0" 401 77 "-" "-" Cookie: "-" Set-Cookie: "-" SessionID: - Thread: "default I/O-3" TimeTaken: 5063
      • 2 times: 
        INFO [io.undertow.accesslog] (default I/O-3) 10.0.0.1 - - [24/Sep/2019:12:06:53 +0200] "POST /wildfly-services/ejb/v1/invoke/-/playground-jar/-/JBossManIntClientBean/-/org.jboss.playground.JBossManIntClient/getHost HTTP/2.0" 200 155 "-" "-" Cookie: "-" Set-Cookie: "-" SessionID: - Thread: "default I/O-3" TimeTaken: 614

      Note: This behavior only occurs if there's more than a single backend server running in a cluster...

      Attachments

        Issue Links

          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-18605 [GSS](7.3.z) WEJBHTTP-30 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Bug - A problem that impairs or prevents the functions of the product. WFLY-13527 Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is incorporated by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-17633 [GSS](7.2.z) WEJBHTTP-30 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Support Patch - A one-off patch related to a customer support case, provided by Support and not Engineering JBEAP-19618 [GSS](7.3.1 patch) WEJBHTTP-30 - Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is related to

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-1716 Allow colon in the request cookie value regardless of setting ALLOW_HTTP_SEPARATORS_IN_V0

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          relates to

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) WEJBHTTP-39 Validate path when setting session affinity

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              flaviarnn Flavia Rainone
              rhn-support-jbaesner Joerg Baesner
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: