From dev-return-12421-archive-asf-public=cust-asf.ponee.io@river.apache.org Tue Aug 21 14:34:01 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 5BF9B180630 for ; Tue, 21 Aug 2018 14:34:00 +0200 (CEST) Received: (qmail 50359 invoked by uid 500); 21 Aug 2018 12:33:59 -0000 Mailing-List: contact dev-help@river.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@river.apache.org Delivered-To: mailing list dev@river.apache.org Received: (qmail 50345 invoked by uid 99); 21 Aug 2018 12:33:58 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 21 Aug 2018 12:33:58 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 33B32C7D38 for ; Tue, 21 Aug 2018 12:33:58 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.076 X-Spam-Level: * X-Spam-Status: No, score=1.076 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MISSING_HEADERS=1.207, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id HFiDIHIFeHDy for ; Tue, 21 Aug 2018 12:33:57 +0000 (UTC) Received: from mail-qt0-f180.google.com (mail-qt0-f180.google.com [209.85.216.180]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 3D2315F30E for ; Tue, 21 Aug 2018 12:33:57 +0000 (UTC) Received: by mail-qt0-f180.google.com with SMTP id t5-v6so19851145qtn.3 for ; Tue, 21 Aug 2018 05:33:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :cc; bh=1MY0Yg7EzE8Q91yT7NX4FP4CB9ho1Dh4sp8KVRf9F2c=; b=ddbSfB+UupyOXh3Gi1FlWYJ7yAnz5TPxuA5gFEmugkCrtR1ICsBezHthNR5WT9QIJJ 7X32RB276oVcaPRKvcypenz0GHtkjd2hTFcnF279M9ynPUvTzLzjWkSVcHYjkqC/79Gx W/hK34bLuU1ZIAVZG07hxI05xLVUEak3uPPWXMvxUSWQARt+K3yNHwPtETwh1vfMtpo+ mg4O/NVQFydDqTelR/Oy9TqNNfbyF7014C1sIzaQly1u8wSFqZfjgzjMahHjqR9cCFm1 AwxhPMngqn5yP7i+A4csOLqklSZjNNnvsgoBzL5ioNV6Cqx7+nL95j+P0XHEO107IxBJ TsNA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version:date :subject:message-id:cc; bh=1MY0Yg7EzE8Q91yT7NX4FP4CB9ho1Dh4sp8KVRf9F2c=; b=W6FGl1RyO3iYd52jCmbG4oAnvgVln/0e4Xu9umKqyUhrooUe5pAHt/CkCPYSpUueFK +iBJjrFaJFL2heb4fdySSuz4tpQrwxqfO+ytSmNVM2jjJz2WnybxAlBn8AIDArusj+ZJ GFHy0qYu9/qHZ7eI4F4vHh4XlCBzF7AebBaji5MPfEi7W9kzLeoKgbGgM7bt/wdUreP4 mw7PPAF5VTQaaYGm1EQxPauqP4TgBs6LGYMXQb0uNjJMMJWN0jfMYpTA1ggxZQLpJbD9 ALby2BKCFpCAreRRPeRqea6ooa4EHfBTmfYQ1R/N9xXSJxYWg87gRxX4wwkisaF2oAoW xscA== X-Gm-Message-State: APzg51BymG6GSVJHqsQphjrrJoyfG/N3TIWTfhw40ThevTn4N0Rt1fJ+ UG0PimV7I6scPXgAyWroQ8UQ54B1 X-Google-Smtp-Source: ANB0VdbvNgbODuWtl4AgZB6+IaSEhGex5hZ7cNPQ0uoduPuRO6qns3tRWRk+Pi5igsFGBXybvW5WWg== X-Received: by 2002:ad4:414b:: with SMTP id z11-v6mr6300012qvp.77.1534854831394; Tue, 21 Aug 2018 05:33:51 -0700 (PDT) Received: from [192.168.1.225] (pool-173-61-117-165.cmdnnj.fios.verizon.net. [173.61.117.165]) by smtp.gmail.com with ESMTPSA id a66-v6sm6798028qkf.96.2018.08.21.05.33.50 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 Aug 2018 05:33:50 -0700 (PDT) From: danrollo@gmail.com Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) Date: Tue, 21 Aug 2018 08:33:49 -0400 Subject: Re: Draft August Board Report Message-Id: <4E9AA7C6-6C36-4664-80DA-13E4F82863CC@gmail.com> Cc: "" X-Mailer: iPad Mail (15G77) +1 Dan Sent from my iPad > On Aug 8, 2018, at 9:43 PM, Bryan Thompson wrote: >=20 > +1 Bryan >=20 > On Wed, Aug 8, 2018 at 4:44 PM, Peter Firmstone > wrote: >> Hello River folk, please review / comment / suggest / changes for the dra= ft >> board report for August below. >>=20 >> Regards, >>=20 >> Peter. >>=20 >> ## Description: >>=20 >> - Apache River provides a platform for dynamic discovery and lookup >> search of network services. Services may be implemented in a number >> of languages, while clients are required to be jvm based (presently at= >> least), to allow proxy jvm byte code to be provisioned dynamically. >>=20 >> ## Issues: >>=20 >> - No significant issues requiring board attention at this time. >>=20 >> ## Activity: >>=20 >> - Minimal activity at present, initial work modular build structure has >> commenced, awaiting to be populated with River 3.0 code. >>=20 >> Release roadmap: >>=20 >> River 3.1 - Modular build restructure (& binary release) >> River 3.2 - Input validation 4 Serialization, delayed unmarshalling& >> safe ServiceRegistrar lookup service.River 3.3 - OSGi support >>=20 >> ## Health report: >>=20 >> - River is a mature codebase with existing deployments, it was primarily >> designed for dynamic discovery of services on private networks. IPv4 NAT= >> limitations historically prevented the use of River on public networks, >> however the use of IPv6 on public networks removes these limitations. We= b >> services evolved with the publish subscribe model of todays internet, Riv= er >> has the potential to dynamically discover services on IPv6 networks, peer= to >> peer, blurring current destinctions between client and server, it has the= >> potential to address many of the security issues currently experienced wi= th >> IoT and avoid any dependency on the proprietary cloud for "things". >>=20 >> - Future Direction: >>=20 >> * Target IOT space with support for OSGi and IPv6 (security fixes >> required prior to announcement) >> * Input validation for java deserialization - prevents DOS and >> Gadget attacks. >> * IPv6 Multicast Service Discovery (River currently only supports >> IPv4 multicast discovery). >> * Delayed unmarshalling for Service Lookup and Discovery (includes >> SafeServiceRegistrar mentioned in release roadmap), so >> authentication can occur prior to downloading service proxy's, >> this addresses a long standing security issue with service lookup >> while significantly improving performance under some use cases. >> * Security fixes for SSL endpoints, updated to TLS v1.2 with removal >> of support for insecure cyphers. >> * Secure TLS SocketFactory's for RMI Registry, uses >> the currently logged in Subject for authentication. >> The RMI Registry still plays a minor role in service activation, >> this allows those who still use the Registry to secure it. >> * Maven build to replace existing ant built that uses >> classdepandjar, a bytecode dependency analysis build tool. >> * Updating the Jini specifications. >>=20 >>=20 >>=20 >> ## PMC changes: >>=20 >> - Currently 12 PMC members. >> - No new PMC members added in the last 3 months >> - Last PMC addition was Dan Rollo on Fri Dec 01 2017 >>=20 >> ## Committer base changes: >>=20 >> - Currently 16 committers. >> - No new committers added in the last 3 months >> - Last committer addition was Dan Rollo at Thu Nov 02 2017 >>=20 >> ## Releases: >>=20 >> - Last release was River-3.0.0 on Thu Oct 06 2016 >>=20 >> ## Mailing list activity: >>=20 >> - Relatively quiet. >>=20 >> - dev@river.apache.org: >> - 94 subscribers (up 0 in the last 3 months): >> - 10 emails sent to list (39 in previous quarter) >>=20 >> - user@river.apache.org: >> - 92 subscribers (up 0 in the last 3 months): >> - 3 emails sent to list (3 in previous quarter) >>=20 >>=20 >> ## JIRA activity: >>=20 >> - 1 JIRA tickets created in the last 3 months >> - 0 JIRA tickets closed/resolved in the last 3 months >>=20 >=20