Skip to content

Add Http discovery transport to denied list for JMX#1918

Merged
cshannon merged 3 commits intoapache:mainfrom
cshannon:broker-mbean-transport-filter
Apr 14, 2026
Merged

Add Http discovery transport to denied list for JMX#1918
cshannon merged 3 commits intoapache:mainfrom
cshannon:broker-mbean-transport-filter

Conversation

@cshannon
Copy link
Copy Markdown
Contributor

This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia

@cshannon cshannon requested review from mattrpav and tabish121 April 13, 2026 19:36
@cshannon cshannon changed the title Add Http Discovery tranport to denied list for JMX Add Http Discovery transport to denied list for JMX Apr 13, 2026
This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia
@cshannon cshannon force-pushed the broker-mbean-transport-filter branch from 621e2d7 to 69edccd Compare April 13, 2026 22:16
@cshannon cshannon changed the title Add Http Discovery transport to denied list for JMX Add Http discovery transport to denied list for JMX Apr 13, 2026
@jbonofre jbonofre self-requested a review April 14, 2026 12:37
jbonofre
jbonofre previously approved these changes Apr 14, 2026

private static final Logger LOG = LoggerFactory.getLogger(BrokerView.class);

private static final Set<String> DENIED_TRANSPORT_SCHEMES = Set.of("vm", "http");
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we consider https here?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Surprisingly (or maybe not given the age) there is no https discovery protocol, the broker only supports http for that.

There is http and https transports but those are not the same as the http discovery.

Here is the location for the http/https transport references: https://github.com/apache/activemq/tree/main/activemq-http/src/main/resources/META-INF/services/org/apache/activemq/transport

And here is the location for http discovery: https://github.com/apache/activemq/tree/main/activemq-http/src/main/resources/META-INF/services/org/apache/activemq/transport/discoveryagent

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A future enhancement could be to add https if people are using it

Comment thread activemq-unit-tests/src/test/java/org/apache/activemq/jmx/JmxCreateNCTest.java Outdated
@cshannon cshannon merged commit 5bda7d8 into apache:main Apr 14, 2026
9 of 10 checks passed
@cshannon cshannon deleted the broker-mbean-transport-filter branch April 14, 2026 13:03
@github-project-automation github-project-automation bot moved this from Backlog to Done in Apache ActiveMQ v6.3.0 Apr 14, 2026
cshannon added a commit to cshannon/activemq that referenced this pull request Apr 14, 2026
This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia

(cherry picked from commit 5bda7d8)
cshannon added a commit to cshannon/activemq that referenced this pull request Apr 14, 2026
This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia

(cherry picked from commit 5bda7d8)
cshannon added a commit that referenced this pull request Apr 14, 2026
This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia

(cherry picked from commit 5bda7d8)
cshannon added a commit that referenced this pull request Apr 14, 2026
This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia

(cherry picked from commit 5bda7d8)
pburgess147 pushed a commit to peersoftware/activemq that referenced this pull request Apr 17, 2026
…ache#1925)

This also prevents the Http discovery transport from being added as a
connector or network connector through JMX and Jolokia

(cherry picked from commit 5bda7d8)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants