[ 
https://issues.apache.org/jira/browse/SOLR-17574?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17900992#comment-17900992
 ] 

David Smiley commented on SOLR-17574:
-------------------------------------

I think the "hostAllowList" ought to not be on ClusterState; it ought to be in 
AllowListUrlChecker and cached there based on the latest liveNodes seen from 
ClusterState.  It's the only consumer.  ClusterState is an important SolrCloud 
abstraction; we should be conservative in adding methods there.  WDYT 
[~broustant] ?

> ClusterState getHostAllowList isn't always updated when live nodes change
> -------------------------------------------------------------------------
>
>                 Key: SOLR-17574
>                 URL: https://issues.apache.org/jira/browse/SOLR-17574
>             Project: Solr
>          Issue Type: Bug
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: SolrCloud
>    Affects Versions: 8.8.2
>            Reporter: David Smiley
>            Priority: Major
>
> ClusterState.getHostAllowList was introduced in SOLR-15217 to validate a host 
> may be reached for distributed-search.  But it's a cached value computed from 
> the live nodes, and the live nodes may change.  Thus it can happen that a new 
> live node arrives, gets replicas, and suddenly, distributed-search fails with 
> a 403 ("Forbidden"), with an error string containing this substring: "is 
> neither a live node of the cluster nor in the configured".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to