Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v12] Validate proxy peer identity #23506

Merged
merged 1 commit into from
Mar 23, 2023

Commits on Mar 23, 2023

  1. Validate proxy peer identity

    Closes #23230
    
    Proxy peer clients now validate that any connections established to
    a peer have the expected UUID. This prevents clients from connecting
    to incorrect peers if the `peer_public_addr` is shared by multiple
    proxies, or is a load balancer.
    
    In the event that a connection is established to an incorrect peer
    the connection is closed and a error is written to the logs. The
    gRPC connection should be attempted multiple times and eventually
    land on the correct peer. However there may be some degradation
    of service until the peer connections are all properly established.
    rosstimothy authored and github-actions committed Mar 23, 2023
    Configuration menu
    Copy the full SHA
    d34227c View commit details
    Browse the repository at this point in the history