[
https://issues.apache.org/jira/browse/LUCENE-10345?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17468029#comment-17468029
]
Adrien Grand commented on LUCENE-10345:
---------------------------------------
+1
> remove non-NRT replication support
> ----------------------------------
>
> Key: LUCENE-10345
> URL: https://issues.apache.org/jira/browse/LUCENE-10345
> Project: Lucene - Core
> Issue Type: Task
> Reporter: Robert Muir
> Priority: Major
>
> Lucene's {{replicator/}} module has really two replication APIs: NRT and the
> older non-NRT.
> The NRT replication is nice, it is actually JUST an API, hence there's no
> network support or anything like that.
> The non-NRT replication has some issues:
> * Uses HTTP but in a non-standard way: binary blobs etc. Responses can't be
> cached or leverage CDNs or anything.
> * legacy plaintext HTTP 1.x only, No support for HTTPS, HTTP/2, etc
> * Giant security hole: uses java (de)serialization
> * legacy web apis (servlet). it is 2021
> * drags in third party http client, doesn't use the one in the standard
> library
> * drags in third party logging jars, doesn't use the one in the standard
> library
> I'd like to deprecate the non-NRT support in 9.x and remove in 10.x. I
> suspect anyone using this module is using the newer NRT mode? If anyone is
> still using the legacy non-NRT mode, please let me know on this issue and
> give me your IP address, so I can try to pop a shell.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
