Andrew Sherman has uploaded a new patch set (#2). ( http://gerrit.cloudera.org:8080/22186 )
Change subject: WIP: IMPALA-13335: ignore duplicate ‘X-Forwarded-For’ headers ...................................................................... WIP: IMPALA-13335: ignore duplicate ‘X-Forwarded-For’ headers This change uses my in-review Impyla commit 14b7ec631753955400dd81a0f1bce55b14ebf1b4. That change needs to be in an alpha release of Impyla before this change can be pushed to master. When using the hs2-http protocol, Impala clients communicate with Impala by sending and receiving http messages. In a modern deployment environment like Kubernetes these http messages may travel through a series of http proxies. These proxies may record information about the path through the system in one or more ‘X-Forwarded-For’ http headers. At present Impala uses this header in various ways, (1) to skip Authentication for connection from a trusted domain, and (2) to record information about the origin of a query in the runtime profile. If there are multiple copies of the ‘X-Forwarded-For’ header then Impala should only use the first of these headers that it sees. For reference see details in https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For TESTING Add a new test which uses a new Impyla mechanism to add multiple headers to its http messages. Change-Id: Iee7b452842aa391d285bd445d6a9e6cbbedd7fbb --- M be/src/transport/THttpServer.cpp M infra/python/deps/requirements.txt M tests/hs2/test_hs2.py 3 files changed, 31 insertions(+), 2 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/86/22186/2 -- To view, visit http://gerrit.cloudera.org:8080/22186 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: Iee7b452842aa391d285bd445d6a9e6cbbedd7fbb Gerrit-Change-Number: 22186 Gerrit-PatchSet: 2 Gerrit-Owner: Andrew Sherman <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
