Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAKd4e_HZOY5HdYmjW-2SAF=K-9pHP6UTc6Dv-ymt3NS3XhPyhw@mail.gmail.com>
References: 
 <CAKd4e_Hx3hK2Ee-us0dMg+4QN6nbvhddNf4V9nHZfvbKdjjo9w@mail.gmail.com>
	<CAEDUwd02EmemzTNQy5exekO7YO3ECgv921_M14yD6-Fke7oYZg@mail.gmail.com>
	<CAKd4e_HZOY5HdYmjW-2SAF=K-9pHP6UTc6Dv-ymt3NS3XhPyhw@mail.gmail.com>
Date: Wed, 13 Jan 2016 18:40:26 -0800
Message-ID: 
 <CANeMN=-6Eh+38kDyB0Jd4L=7pHv6nkP17KwEKOj8LDexaJV+hQ@mail.gmail.com>
Subject: Re: max connection per user
From: Bryan Cheng <bryan@blockcypher.com>
To: user@cassandra.apache.org
Content-Type: multipart/alternative; boundary=047d7b417a638f19fd05294235e8

--047d7b417a638f19fd05294235e8
Content-Type: text/plain; charset=UTF-8

Are you actively exposing your database to users outside of your
organization, or are you just asking about security best practices?

If you mean the former, this isn't really a common use case and there isn't
a huge amount out of the box that Cassandra will do to help.

If you're just asking about security best-practices,
http://www.datastax.com/wp-content/uploads/2014/04/WP-DataStax-Enterprise-Best-Practices.pdf
has a brief blurb, and there are many resources online for securing
Cassandra specifically and databases in general- the approaches are going
to be largely the same.

Can you describe what avenues you're expecting either intrusion or DOS?

On Wed, Jan 13, 2016 at 6:01 PM, oleg yusim <olegyusim@gmail.com> wrote:

> OK Rob, I see what you saying. Well, let's dive into the long questions
> and answers at this case a bit:
>
> 1) Is there any other approach Cassandra currently utilizes to mitigate
> DoS attacks?
> 2) How about max connection per DB? I know, Cassandra has this parameter
> on JDBC driver configuration, but what be suggested value not to exceed?
>
> Thanks,
>
> Oleg
>
> On Wed, Jan 13, 2016 at 6:31 PM, Robert Coli <rcoli@eventbrite.com> wrote:
>
>> On Wed, Jan 13, 2016 at 1:41 PM, oleg yusim <olegyusim@gmail.com> wrote:
>>
>>> Quick question, here: does Cassandra have a configuration switch to
>>> limit number of connections per user (protection of DoS attack, security)?
>>>
>>
>> Quick answer : no.
>>
>> =Rob
>>
>>
>
>

--047d7b417a638f19fd05294235e8
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Are you actively exposing your database to users outside o=
f your organization, or are you just asking about security best practices?<=
div><br></div><div>If you mean the former, this isn&#39;t really a common u=
se case and there isn&#39;t a huge amount out of the box that Cassandra wil=
l do to help.</div><div><br></div><div>If you&#39;re just asking about secu=
rity best-practices,=C2=A0<a href=3D"http://www.datastax.com/wp-content/upl=
oads/2014/04/WP-DataStax-Enterprise-Best-Practices.pdf">http://www.datastax=
.com/wp-content/uploads/2014/04/WP-DataStax-Enterprise-Best-Practices.pdf</=
a> has a brief blurb, and there are many resources online for securing Cass=
andra specifically and databases in general- the approaches are going to be=
 largely the same.</div><div><br></div><div>Can you describe what avenues y=
ou&#39;re expecting either intrusion or DOS?</div></div><div class=3D"gmail=
_extra"><br><div class=3D"gmail_quote">On Wed, Jan 13, 2016 at 6:01 PM, ole=
g yusim <span dir=3D"ltr">&lt;<a href=3D"mailto:olegyusim@gmail.com" target=
=3D"_blank">olegyusim@gmail.com</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div dir=3D"ltr">OK Rob, I see what you saying. Well, let&#39=
;s dive into the long questions and answers at this case a bit:<div><br></d=
iv><div>1) Is there any other approach Cassandra currently utilizes to miti=
gate DoS attacks?</div><div>2) How about max connection per DB? I know, Cas=
sandra has this parameter on JDBC driver configuration, but what be suggest=
ed value not to exceed?</div><div><br></div><div>Thanks,</div><div><br></di=
v><div>Oleg</div></div><div class=3D"HOEnZb"><div class=3D"h5"><div class=
=3D"gmail_extra"><br><div class=3D"gmail_quote">On Wed, Jan 13, 2016 at 6:3=
1 PM, Robert Coli <span dir=3D"ltr">&lt;<a href=3D"mailto:rcoli@eventbrite.=
com" target=3D"_blank">rcoli@eventbrite.com</a>&gt;</span> wrote:<br><block=
quote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc=
 solid;padding-left:1ex"><div dir=3D"ltr"><div class=3D"gmail_extra"><div c=
lass=3D"gmail_quote"><span>On Wed, Jan 13, 2016 at 1:41 PM, oleg yusim <spa=
n dir=3D"ltr">&lt;<a href=3D"mailto:olegyusim@gmail.com" target=3D"_blank">=
olegyusim@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
><div dir=3D"ltr"><div>Quick question, here: does Cassandra have a configur=
ation switch to limit number of connections per user (protection of DoS att=
ack, security)?</div></div></blockquote><div><br></div></span><div>Quick an=
swer : no.</div><div><br></div><div>=3DRob</div><div>=C2=A0</div></div></di=
v></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>

--047d7b417a638f19fd05294235e8--