Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-35882

The Memcached STATS "dcp" command should have a mode that only retrieves stats on connections owned by the user

    XMLWordPrintable

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 6.5.0
    • 6.5.0
    • memcached
    • None

    Description

      ns_server uses the "dcp" STATS command to get stats on its DCP connections. The problem is that this command returns stats on all dcp connection leaving replication vulnerable to an issue gathering stats by from any client. This has caused issues in the past where poorly behaved clients caused intra cluster data replication to drop.

      It would be good to have a capability to retrieve stats for connections owned by the user running the stats command.

      Attachments

        Issue Links

          For Gerrit Dashboard: MB-35882
          # Subject Branch Project Status CR V

          Activity

            trond Trond Norbye added a comment -

            From a "security perspective" I think that by default stats dcp should only return your own connections, and we should have a dedicated command to return all DCP connections (which requires extra privileges). (the reason to flip the logic is that ns_server holds all privileges)

            trond Trond Norbye added a comment - From a "security perspective" I think that by default stats dcp should only return your own connections, and we should have a dedicated command to return all DCP connections (which requires extra privileges). (the reason to flip the logic is that ns_server holds all privileges)

            Build couchbase-server-6.5.0-4291 contains kv_engine commit 945ae4b with commit message:
            MB-35882: Add support for filters to stats dcp

            build-team Couchbase Build Team added a comment - Build couchbase-server-6.5.0-4291 contains kv_engine commit 945ae4b with commit message: MB-35882 : Add support for filters to stats dcp

            Trond Norbye - Can you please help with steps to reproduce.

            ritam.sharma Ritam Sharma added a comment - Trond Norbye - Can you please help with steps to reproduce.

            People

              dfinlay Dave Finlay
              dfinlay Dave Finlay
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty