Uploaded image for project: 'Openfire'
  1. Openfire
  2. OF-1188

Blacklisted s2s domain still consumes outbound available threads

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.0.3
    • Fix Version/s: 4.1.0
    • Component/s: Core
    • Labels:
      None

      Description

      While Openfire will properly block blacklisted domains from establishing outbound s2s connections, this block happens after a thread has been allocated. So when naughty folks attempt to send lots of packets to a blacklisted domain, <theory> Openfire can exhaust its available pool of outbound threads and cause valid traffic to hang awaiting resources to become available</theory>.

      This theory appears to be happening on open_chat as when we notice MUC latencies, the server is logging lots of blocked s2s connections at the time.

        Attachments

          Activity

            People

            Assignee:
            dwd Dave Cridland
            Reporter:
            akrherz Daryl Herzmann
            Votes:
            2 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: