Giter VIP home page Giter VIP logo

Comments (5)

huxi avatar huxi commented on May 30, 2024

If the external server can connect to the relevant open Lilith port then yes.

You are probably behind a firewall/NAT and would need to configure port forwarding. If you have a dynamic IP address you'd also need to change it in the logback config accordingly.

Anyway: that's not a Lilith issue so I'll close it.

Hope that helps.

Cheers,
Jรถrn.

from lilith.

Silnar avatar Silnar commented on May 30, 2024

Hmm, what with doing it other way round...
To setup a 'log server' that lilith could connect to?
Is it possible ?

Cheers.

from lilith.

huxi avatar huxi commented on May 30, 2024

This is supported by log4j and Logback (recently) but is unsupported by Lilith.

The thing is that doing so is basically a security nightmare. Anybody could connect to that port and just linger, causing the application to grind to a halt if the event buffer fills up to the brim, making it perfect for a DoS attack.

It wouldn't be too hard to support this in Lilith (I guess) but I don't want to encourage people to use a potentially dangerous feature...

from lilith.

Silnar avatar Silnar commented on May 30, 2024

This is supported by log4j and Logback (recently) but is unsupported by Lilith.

I'm using logback. Do you mean ServerSocketAppender ?

The thing is that doing so is basically a security nightmare. Anybody could connect to that port and just linger, causing the application to grind to a halt if the event buffer fills up to the brim, making it perfect for a DoS attack.

Wouldn't it be a matter of securing it somehow?
Allowing access from selected IPs only or maybe setting up a dedicated VPN?

from lilith.

huxi avatar huxi commented on May 30, 2024

Yes, ServerSocketAppender.

The thing is:
if you are using a VPN you could simply use SocketAppender instead since you'd then have a dedicated non-dynamic IP address in the VPN. That's how we use Logback+Lilith in the production environment of the company I work at and that's the "proper" way regarding security.

If I'd support ServerSocketAppender then I suspect people wouldn't even think twice about issues like that because "it works" - until something bad happens.

from lilith.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.