rmuir opened a new pull request, #12038:
URL: https://github.com/apache/lucene/pull/12038

   Lucene's replicator/ module has really two replication APIs: NRT and the 
older non-NRT.
   
   The NRT replication is nice, it is actually JUST an API, hence there's no 
network support or anything like that.
   
   The non-NRT replication has some issues:
   * Uses HTTP but in a non-standard way: binary blobs etc. Responses can't be 
cached or leverage CDNs or anything.
   * legacy plaintext HTTP 1.x only, No support for HTTPS, HTTP/2, etc
   * Giant security hole: uses java (de)serialization
   * legacy web apis (servlet). it is 2022
   * drags in third party http client, doesn't use the one in the standard 
library
   * drags in third party logging jars, doesn't use the one in the standard 
library
   
   I'd like to deprecate the non-NRT support in 9.x and remove in 10.x. I 
suspect anyone using this module is using the newer NRT mode? If anyone is 
still using the legacy non-NRT mode, please let me know on this issue and give 
me your IP address, so I can try to pop a shell.
   
   Please see #11381 for more information (I copied the description from 
there). I opened the issue about a year ago and there has not been any negative 
feedback.
   
   Closes #11381
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to