[ 
https://issues.apache.org/jira/browse/LUCENE-10345?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17561205#comment-17561205
 ] 

Rushabh Shah commented on LUCENE-10345:
---------------------------------------

Hi [~rcmuir]
Can you please help me scope the changes required in this jira. I can try to 
put a patch. Thank you.

> remove non-NRT replication support
> ----------------------------------
>
>                 Key: LUCENE-10345
>                 URL: https://issues.apache.org/jira/browse/LUCENE-10345
>             Project: Lucene - Core
>          Issue Type: Task
>            Reporter: Robert Muir
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Lucene's {{replicator/}} module has really two replication APIs: NRT and the 
> older non-NRT.
> The NRT replication is nice, it is actually JUST an API, hence there's no 
> network support or anything like that. 
> The non-NRT replication has some issues:
> * Uses HTTP but in a non-standard way: binary blobs etc. Responses can't be 
> cached or leverage CDNs or anything.
> * legacy plaintext HTTP 1.x only, No support for HTTPS, HTTP/2, etc
> * Giant security hole: uses java (de)serialization
> * legacy web apis (servlet). it is 2021
> * drags in third party http client, doesn't use the one in the standard 
> library
> * drags in third party logging jars, doesn't use the one in the standard 
> library
> I'd like to deprecate the non-NRT support in 9.x and remove in 10.x. I 
> suspect anyone using this module is using the newer NRT mode? If anyone is 
> still using the legacy non-NRT mode, please let me know on this issue and 
> give me your IP address, so I can try to pop a shell.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to