- All Implemented Interfaces:
- javax.servlet.Filter
public class NodeRequestFilter
extends Object
implements javax.servlet.Filter
A filter that prevents direct access to nodes (i.e., flow controllers
connected to a cluster). Direct access to nodes by clients external to the
cluster is prevented because the dataflow must be identical across the
cluster.
Direct access to a node is determined by the presence of a custom request
header. The header key is "X-CLUSTER_MANAGER" and the value can be
anything/empty. The presence of this header is a simple way to flag that the
request was issued by the cluster manager and may proceed to the next filter.
Since this header may be faked, we only make decisions about the header if
the application instance is a node and connected to the cluster.
- Author:
- unattributed