Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement high integrity mode for commands #2741

Merged
merged 13 commits into from
Jun 24, 2024
Merged

Implement high integrity mode for commands #2741

merged 13 commits into from
Jun 24, 2024

Conversation

mgravell
Copy link
Collaborator

@mgravell mgravell commented Jun 13, 2024

Fixes #2706

This adds additional ECHO items after every outbound request, and adds validation of that correlation marker before treating responses as valid.

This is initial draft only; needs conversion to sequence and testing of failure modes.

Discussion points

  • Entropy vs counter - Going with Counter
  • Naming
  • Confidence testing (success and failure)
  • Performance impact testing
  • Depending on performance impact: should this be defaulted for any scenarios? azure?
  • Needs checks of sync vs async, F+F, etc

@mgravell mgravell changed the title initial implementation of #2706 implement high integrity mode Jun 13, 2024
@mgravell mgravell added the area:security infosec topics label Jun 13, 2024
Copy link
Collaborator

@NickCraver NickCraver left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Went through on call - notes inline

src/StackExchange.Redis/ConfigurationOptions.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/Message.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/PhysicalConnection.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/PhysicalConnection.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/PhysicalConnection.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/PublicAPI/PublicAPI.Unshipped.txt Outdated Show resolved Hide resolved
tests/StackExchange.Redis.Tests/TestBase.cs Outdated Show resolved Hide resolved
src/StackExchange.Redis/Message.cs Outdated Show resolved Hide resolved
@NickCraver NickCraver changed the title implement high integrity mode Implement high integrity mode for commands Jun 18, 2024
@mgravell mgravell marked this pull request as ready for review June 20, 2024 16:09
@@ -6,7 +6,7 @@
<AssemblyName>BasicTest</AssemblyName>
<OutputType>Exe</OutputType>
<PackageId>BasicTest</PackageId>
<RuntimeIdentifiers>win7-x64</RuntimeIdentifiers>
<!--<RuntimeIdentifiers>win7-x64</RuntimeIdentifiers>-->
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Uncomment or remove?

@@ -6,7 +6,7 @@
<AssemblyName>BasicTestBaseline</AssemblyName>
<OutputType>Exe</OutputType>
<PackageId>BasicTestBaseline</PackageId>
<RuntimeIdentifiers>win7-x64</RuntimeIdentifiers>
<!--<RuntimeIdentifiers>win7-x64</RuntimeIdentifiers>-->
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Uncomment or remove?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it isn't the core - I'm fine with leaving it for context

@mgravell mgravell merged commit 1de8dac into main Jun 24, 2024
8 checks passed
@mgravell mgravell deleted the high-integrity branch June 24, 2024 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Feature proposal: high integrity mode
3 participants