[
https://issues.apache.org/jira/browse/ARIES-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15509504#comment-15509504
]
Timothy Ward commented on ARIES-1613:
-------------------------------------
> If I understood correctly, "remote Topology Manager" is the one running on
> the remote client, right?
There are two topology managers installed, one on the "server" side and one on
the "client" side.
The "server" topology manager is the one who can add extra properties when
exporting the service, and who gets to decide the following things:
1. Which distribution providers should be used for export
2. What extra properties should be exported alongside the service properties
3. Which endpoint descriptions should be sent to the local Endpoint Event
Listeners in the framework
4. What to do on endpoint faliure
The "client" topology manager receives endpoint notifications from discovery,
which should be passing the Endpoints unadulterated and can:
1. Decide to import, ignore or save an endpoint description for later
2. Decide which distribution provider(s) to try importing the service with
3. What to do on endpoint failure
> it would be nice (at least from security, or hardening, perspective) that
> they did not know anything about (i.e. they do not see) the "raw"
> EndpointDescription.
The correct place to do the security check here is in a firewall and/or filter
on the "raw" servlet, to check access is not from outside, otherwise someone
could simply guess the URL. Also, by choosing to ignore the raw URL it remains
invisible as a service (i.e. no imported OSGi service exists).
If you really want to partition your discovery space then what you need are two
discovery providers (or two configurations of the same discovery provider)
which have different discovery domains. Again, these would not change the
endpoint properties, but the server topology can determine which
EndpointEventListener is called for which EndpointDescription.
> DiscoveryPlugin interface not exported
> --------------------------------------
>
> Key: ARIES-1613
> URL: https://issues.apache.org/jira/browse/ARIES-1613
> Project: Aries
> Issue Type: Bug
> Components: Remote Service Admin
> Affects Versions: rsa-1.9.0
> Reporter: Panu Hämäläinen
>
> The package containing the interface
> org.apache.cxf.dosgi.discovery.zookeeper.publish.DiscoveryPlugin is not
> exported (MANIFEST.MF) from bundle cxf-dosgi-ri-discovery-distributed (1.7.0)
> which makes it impossible to implement 3rd party discovery plugins.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)