Add Http discovery transport to denied list for JMX#1918
Add Http discovery transport to denied list for JMX#1918cshannon merged 3 commits intoapache:mainfrom
Conversation
This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia
621e2d7 to
69edccd
Compare
|
|
||
| private static final Logger LOG = LoggerFactory.getLogger(BrokerView.class); | ||
|
|
||
| private static final Set<String> DENIED_TRANSPORT_SCHEMES = Set.of("vm", "http"); |
There was a problem hiding this comment.
Should we consider https here?
There was a problem hiding this comment.
Surprisingly (or maybe not given the age) there is no https discovery protocol, the broker only supports http for that.
There is http and https transports but those are not the same as the http discovery.
Here is the location for the http/https transport references: https://github.com/apache/activemq/tree/main/activemq-http/src/main/resources/META-INF/services/org/apache/activemq/transport
And here is the location for http discovery: https://github.com/apache/activemq/tree/main/activemq-http/src/main/resources/META-INF/services/org/apache/activemq/transport/discoveryagent
There was a problem hiding this comment.
A future enhancement could be to add https if people are using it
This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia (cherry picked from commit 5bda7d8)
This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia (cherry picked from commit 5bda7d8)
…ache#1925) This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia (cherry picked from commit 5bda7d8)
This also prevents the Http discovery transport from being added as a connector or network connector through JMX and Jolokia