[jboss-jira] [JBoss JIRA] (WFCORE-1145) Review of HostController / Application Server Remoting connections

[David Lloyd (JIRA)]

    [ https://issues.jboss.org/browse/WFCORE-1145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13132119#comment-13132119 ] 

David Lloyd commented on WFCORE-1145:
-------------------------------------

One possible approach is to use stdin for the HC-to-server direction, and a dedicated ephemeral socket for the server-to-HC direction.  The stream could accept and sequentially execute Callable objects, returning the return value or exception on the return channel.  In this way the HC could directly control the server.

Security-wise, this is similar to/no worse than having a scripting language on your PATH.

> Review of HostController / Application Server Remoting connections
> ------------------------------------------------------------------
>
>                 Key: WFCORE-1145
>                 URL: https://issues.jboss.org/browse/WFCORE-1145
>             Project: WildFly Core
>          Issue Type: Task
>          Components: Domain Management
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>              Labels: affects_elytron
>             Fix For: 3.0.0.Alpha1
>
>
> Where an application server connects back to it's host controller in domain mode it used the same Remoting connector exposed possibly for native domain management access.
> The problem with this is that as soon as any security restrictions are placed on the connector exposed by the host controller then the application servers require something to work with this - this is even though we are only ever talking about loopback communication between two process on the same machine.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)