Skip to content

false alarm in Attack Log #1

@fxusyd

Description

@fxusyd

When CTP web server runs behind a load balancer on EKS, the attack logger records large amount of "attacks" which actually initiated from kube-proxy on the worker nodes.

Log Viewer also keeps generating errors as below.
14:00:21 ERROR [HttpService] Internal server error.
java.lang.NullPointerException
at org.rsna.util.AttackLog.getInfo(AttackLog.java:75)
at org.rsna.util.AttackLog.addAttack(AttackLog.java:54)
at org.rsna.server.HttpRequest.getLine(HttpRequest.java:660)
at org.rsna.server.HttpRequest.getHeaders(HttpRequest.java:635)
at org.rsna.server.HttpRequest.(HttpRequest.java:87)
at org.rsna.server.HttpRequest.(HttpRequest.java:70)
at org.rsna.service.HttpService$Handler.run(HttpService.java:93)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status
    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions