Page History

...

The SSVM agent will listen for any connections from Apache web server (using the NioServer utilitynetty server). It will be using the localhost and port number (come from a configuration8210) to listen.

SSVM apache proxies the data from https to http url on localhost:port using ProxyPass.

...

• pre-validation errors (file upload hasn't started yet)
  • SSL handshake failed
  • params validation with PSK failed
  • max file size from the header crossed the limit
• post validation error 
  • file successfully uploaded
    • file uploaded is not of the type specified (for ex: if the template is said to be of type tar, the actual downloaded file is not if this type)
    • max upload limit crossed
  • partial file upload (http errors can be caught through appropriate event handlers: exception,timeout,closed (http://hc.apache.org/httpcomponents-core-ga/tutorial/html/nio.html))
    • user stopped/canceled the post request before completion
    • uploading the template failed due to a network issue
    • browser request timed out
    • browser crashed
    • SSVM is down/restarted
    • SSVM apache down/restarted
    • secondary storage is not accessible
    • there isn't enough space in secondary storage and hence agent can't write to it

...

• Global configuration to limit the max upload size of template/volume - upload.post.max.sizetemplate - max.template.iso.size (existing)

• Global configuration to limit the max upload size of volume - storage.max.volume.upload.size (existing)

• hidden configuration to save sha1 PSK on the management server - upload.post.secret.key
• management server upload polling interval and polling timeout - upload.monitoring.interval, upload.operation.timeout
• time interval at which the GC or cleanup thread should run - upload.post.gc.interval

...

• The NFS Store url, path and some other information are exposed to the end user in the response to getUploadParams. This is done so that agent gets all the information required to upload the template with the POST request. One option can be to encrypt the The entire JSON will be encrypted using PSK and then send it sent across as part of getUploadParams response
• The Apache web server will only accept upload requests over HTTPS
• Proxy between apache and agent is internal to the SSVM. Hence no security threat here.
• SSVM PSK location can only be accessed by admin. Hence no security threat.

...