Skip to content

[#1770] Feature: IP address allow/deny support - #2539

Open
mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:amq-gh-1770
Open

[#1770] Feature: IP address allow/deny support#2539
mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:amq-gh-1770

Conversation

@mattrpav

@mattrpav mattrpav commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

This feature adds IP allow/deny support at the transport layer, before any protocol negotiation. On deny, connections are quietly closed and a counter is incremented.

  • Addresses may be entered in CIDR format or exact IP value.
  • Allow/Deny list supports string file: uri support to load from a properties file (one CIDR per-line) with default DoS/memory bloat protections in place (10MB and 100,000 entries).

Notes:

  1. Failover will retry indefinitely
  2. SSl and non-SSL see an EOF or connection closed by peer error.

@jbonofre

jbonofre commented Sep 8, 2026

Copy link
Copy Markdown
Member

As you can see in the issue, I had something about that. I would appreciate you ping me before doing work (not the first time it happens).

@mattrpav

mattrpav commented Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

@jbonofre that's my bad. I saw this branch sitting in my local since the AMQ-9800 days, so I rebased it to get it up. I'll be sure to check in next time!

@jbonofre

jbonofre commented Sep 8, 2026

Copy link
Copy Markdown
Member

@mattrpav that's all right. Next time, just ping on issue or PR to avoid dual work 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

2 participants