Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-15501

Dynamic config `proxy_protocol_networks`

Details

    • Task
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.3.6
    • Server
    • None
    • 10.3.6-1

    Description

      Current Implication of proxy protocol is not very convenient，proxy_protocol_networks is read only, so when we need deploy a proxy which not belong to proxy_protocol_networks, then we need change the server's config and restart.

      And for the aspect of safety, we cannot config a big subnet, maybe just add proxy's ip to proxy_protocol_networks

      Attachments

        Issue Links

          blocks

          New Feature - A new feature of the product, which has yet to be developed. MXS-1551 Ip white list for proxy

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            dapeng dapeng huang created issue -
            dapeng dapeng huang made changes -
            Field Original Value New Value
            Description Current Implication of proxy protocol is not very convenient，proxy_protocol_networks is read only, so when I need deploy a proxy which ip is not in proxy_protocol_networks, then I need change server's config and restart server. Current Implication of proxy protocol is not very convenient，proxy_protocol_networks is read only, so when we need deploy a proxy which ip is not in proxy_protocol_networks, then we need change the server's config and restart.

            And for the aspect of safety, we cannot config a big subnet, maybe just add proxy's ip to proxy_protocol_networks
            dapeng dapeng huang made changes -
            Description Current Implication of proxy protocol is not very convenient，proxy_protocol_networks is read only, so when we need deploy a proxy which ip is not in proxy_protocol_networks, then we need change the server's config and restart.

            And for the aspect of safety, we cannot config a big subnet, maybe just add proxy's ip to proxy_protocol_networks             		Current Implication of proxy protocol is not very convenient，proxy_protocol_networks is read only, so when we need deploy a proxy which not belong to proxy_protocol_networks, then we need change the server's config and restart.

            And for the aspect of safety, we cannot config a big subnet, maybe just add proxy's ip to proxy_protocol_networks
            wlad Vladislav Vaintroub made changes -
            Fix Version/s 10.3 [ 22126 ]
            wlad Vladislav Vaintroub made changes -
            Assignee Vladislav Vaintroub [ wlad ]
            dapeng dapeng huang made changes -
            wlad Vladislav Vaintroub made changes -
            Sprint 10.3.6 [ 237 ]
            wlad Vladislav Vaintroub made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            wlad Vladislav Vaintroub made changes -
            Component/s Server [ 13907 ]
            Fix Version/s 10.3.6 [ 23003 ]
            Fix Version/s 10.3 [ 22126 ]
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 85893 ] MariaDB v4 [ 133486 ]

            People

              wlad Vladislav Vaintroub
              dapeng dapeng huang
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.