yanze chen created IOTDB-4970:
---------------------------------

             Summary: [sync] Enhanced sync safety management
                 Key: IOTDB-4970
                 URL: https://issues.apache.org/jira/browse/IOTDB-4970
             Project: Apache IoTDB
          Issue Type: Improvement
            Reporter: yanze chen
            Assignee: yanze chen


Before the sync sender can send data, a handshake with the receiver is 
required. The current handshake policy is to verify the sender's IP address 
based on the receiver's white list. However, the current sender's ip address is 
provided by the sender and may be falsified leading to security issues.

 
 # This ISSUE will get the ip address from the thrift connection.
 # The default whitelist is set to 0.0.0.0/32, which rejects all the sender's 
ip.
 # Some optimizations have been made to handle cases of handshake failure.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to