Skip to content

[#1770] Feature: IP address allow/deny support - #2539

Open
mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:amq-gh-1770
Open

[#1770] Feature: IP address allow/deny support#2539
mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:amq-gh-1770

Conversation

@mattrpav

@mattrpav mattrpav commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

This feature adds IP allow/deny support at the transport layer, before any protocol negotiation. On deny, connections are quietly closed and a counter is incremented.

  • Addresses may be entered in CIDR format or exact IP value.
  • Allow/Deny list supports string file: uri support to load from a properties file (one CIDR per-line) with default DoS/memory bloat protections in place (10MB and 100,000 entries).

Notes:

  1. Failover will retry indefinitely
  2. SSl and non-SSL see an EOF or connection closed by peer error.

@jbonofre

jbonofre commented Sep 8, 2026

Copy link
Copy Markdown
Member

As you can see in the issue, I had something about that. I would appreciate you ping me before doing work (not the first time it happens).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

2 participants