[jboss-jira] [JBoss JIRA] (JGRP-2021) Prevent messages from non-members

[Bela Ban (JIRA)]

Bela Ban created JGRP-2021:
------------------------------

             Summary: Prevent messages from non-members
                 Key: JGRP-2021
                 URL: https://issues.jboss.org/browse/JGRP-2021
             Project: JGroups
          Issue Type: Feature Request
            Reporter: Bela Ban
            Assignee: Bela Ban
             Fix For: 4.0


Although JGroups provides message encryption ({{ENCRYPT}}) and cluster admission control ({{AUTH}}), it _does not_ prevent malicious attacks.

For example, if a rogue node creates a minimal stack without encryption or authentication, then it is possible for that member to
* Send messages to the cluster
* Capture an existing message from a cluster member P, change it (e.g. the seqno) and resend it spooking P's address
* Install a new view including itself
* Possibly install a new shared key in {{ENCRYPT}}, thereby being able to _receive_ cluster messages

The goals are therefore:
1. Prevent cluster members from delivering messages from a non-member (exceptions are join requests from new members and merge requests)
2. Prevent a non-member from receiving any cluster messages

The first goal also prevents rogue views from getting installed, or new shared secrets from being installed into {{ENCRYPT}}.




--
This message was sent by Atlassian JIRA
(v6.4.11#64026)