blob: 6dbb4b71ae3b04adec988eb4d33a8c993dd79efa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
// -*- C++ -*-
//=============================================================================
/**
* @file LB_ClientRequestInterceptor.h
*
* $Id$
*
* @author Ossama Othman <ossama@uci.edu>
*/
//=============================================================================
#ifndef TAO_LB_CLIENT_REQUEST_INTERCEPTOR_H
#define TAO_LB_CLIENT_REQUEST_INTERCEPTOR_H
#include "ace/config-all.h"
#if !defined (ACE_LACKS_PRAGMA_ONCE)
# pragma once
#endif /* ACE_LACKS_PRAGMA_ONCE */
#include "tao/PI/PI.h"
#include "tao/PortableInterceptorC.h"
#include "tao/LocalObject.h"
#if defined(_MSC_VER)
#pragma warning(push)
#pragma warning(disable:4250)
#endif /* _MSC_VER */
/**
* @class TAO_LB_ClientRequestInterceptor
*
* @brief Load balancer client request interceptor that injects an
* IOP::ServiceContext into a request's
* IOP::ServiceContextList.
*
* Load shedding requires that a specific ServiceContext exists
* in the request's ServiceContextList. The server side will attempt
* to detect if that ServiceContext exists, and shed load if it does.
*
* @note This model introduces a Denial-of-Service vulnerability.
* Malicious or incorrectly configured clients can spoof the
* server into thinking that it is invoking requests on a
* non-load balanced object. At that point, the server will let
* the request through, completely bypassing the load shedding
* mechanism! A server side-only mechanism can correct this
* vulnerability, but at the potential cost of additional
* resource overhead.
*/
class TAO_LB_ClientRequestInterceptor
: public virtual PortableInterceptor::ClientRequestInterceptor,
public virtual TAO_Local_RefCounted_Object
{
public:
/**
* @name Methods Required by the Client Request Interceptor
* Interface
*
* These are methods that must be implemented since they are pure
* virtual in the abstract base class. They are the canonical
* methods required for all client request interceptors.
*/
//@{
/// Return the name of this ClientRequestInterceptor.
virtual char * name (ACE_ENV_SINGLE_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException));
virtual void destroy (ACE_ENV_SINGLE_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException));
virtual void send_request (
PortableInterceptor::ClientRequestInfo_ptr ri
ACE_ENV_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException,
PortableInterceptor::ForwardRequest));
virtual void send_poll (
PortableInterceptor::ClientRequestInfo_ptr ri
ACE_ENV_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException));
virtual void receive_reply (
PortableInterceptor::ClientRequestInfo_ptr ri
ACE_ENV_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException));
virtual void receive_exception (
PortableInterceptor::ClientRequestInfo_ptr ri
ACE_ENV_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException,
PortableInterceptor::ForwardRequest));
virtual void receive_other (
PortableInterceptor::ClientRequestInfo_ptr ri
ACE_ENV_ARG_DECL_WITH_DEFAULTS)
ACE_THROW_SPEC ((CORBA::SystemException,
PortableInterceptor::ForwardRequest));
//@}
};
#if defined(_MSC_VER)
#pragma warning(pop)
#endif /* _MSC_VER */
#endif /* TAO_LB_CLIENT_REQUEST_INTERCEPTOR_H */
|
