cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jeremy Hanna (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (CASSANDRA-14236) C* should gradually recycle open connections after hot reloading SSL Certificates
Date Tue, 20 Feb 2018 17:36:00 GMT

     [ https://issues.apache.org/jira/browse/CASSANDRA-14236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jeremy Hanna updated CASSANDRA-14236:
-------------------------------------
    Labels: security  (was: )

> C* should gradually recycle open connections after hot reloading SSL Certificates
> ---------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-14236
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-14236
>             Project: Cassandra
>          Issue Type: New Feature
>            Reporter: Dinesh Joshi
>            Assignee: Dinesh Joshi
>            Priority: Minor
>              Labels: security
>
> Currently the way SSL certificate hot reloading is implemented, it only applies the new
certificates to new connections. Open connections are not terminated. Immediate termination
of these connections is undesirable as it will cause a thundering herd problem. We need a
way to gradually drain existing connections so that the new SSL certificates are used by all
connections.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org


Mime
View raw message