David Smiley created SOLR-18310:
-----------------------------------

             Summary: opentelemetry module should not ship Netty JARs
                 Key: SOLR-18310
                 URL: https://issues.apache.org/jira/browse/SOLR-18310
             Project: Solr
          Issue Type: Improvement
          Components: tracing
            Reporter: David Smiley
            Assignee: David Smiley


We ship more JARs than we need to in our opentelemetry module.  Netty is a CVE 
machine so let's pair down what we ship.  See OTEL docs on the exporters 
[https://opentelemetry.io/docs/languages/java/sdk/#otlp-exporters] which shows 
we can use a JDK HttpClient based transport.  We'd loose GRPC but so what – 
someone can add such JARs if they want.

Also in the bigger picture, an OTEL Java Agent can be used, rendering the need 
for the module altogether moot.  FWIW I prefer the agent.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to