Skip to content

Pipe: Refactor AirGap receiver with configurable payload size control#17443

Merged
jt2594838 merged 7 commits intoapache:masterfrom
luoluoyuyu:fix/airgap-receiver-payload-guard
Apr 9, 2026
Merged

Pipe: Refactor AirGap receiver with configurable payload size control#17443
jt2594838 merged 7 commits intoapache:masterfrom
luoluoyuyu:fix/airgap-receiver-payload-guard

Conversation

@luoluoyuyu
Copy link
Copy Markdown
Member

@luoluoyuyu luoluoyuyu commented Apr 8, 2026


This PR has:

  • been self-reviewed.
    • concurrent read
    • concurrent write
    • concurrent read and write
  • added documentation for new or modified features or behaviors.
  • added Javadocs for most classes and all non-trivial methods.
  • added or updated version, license, or notice information
  • added comments explaining the "why" and the intent of the code wherever would not be obvious
    for an unfamiliar reader.
  • added unit tests or modified existing tests to cover new code paths, ensuring the threshold
    for code coverage.
  • added integration tests.
  • been tested in a test IoTDB cluster.

Key changed/added classes (or packages if there are too many classes) in this PR

Introduce a dedicated AirGap receiver payload limit in the pipe config and enforce it before request buffer allocation, so oversized payloads are rejected early and memory pressure is bounded under malicious or malformed inputs.

Made-with: Cursor
@luoluoyuyu luoluoyuyu changed the title Pipe: add hot-reloadable AirGap payload size guard to mitigate DoS risk. Pipe: Refactor AirGap receiver with configurable payload size control Apr 8, 2026
@jt2594838
Copy link
Copy Markdown
Contributor

May add a test

@jt2594838 jt2594838 merged commit 7afedfe into apache:master Apr 9, 2026
24 of 33 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants