org.eclipse.jetty.server.handler

Class ThreadLimitHandler

java.lang.Object

ContainerLifeCycle

org.eclipse.jetty.server.handler.AbstractHandler

org.eclipse.jetty.server.handler.AbstractHandlerContainer

org.eclipse.jetty.server.handler.HandlerWrapper

org.eclipse.jetty.server.handler.ThreadLimitHandler

All Implemented Interfaces:

Handler, HandlerContainer

public class ThreadLimitHandler
extends HandlerWrapper

Handler to limit the threads per IP address for DOS protection

The ThreadLimitHandler applies a limit to the number of Threads that can be used simultaneously per remote IP address.

The handler makes a determination of the remote IP separately to any that may be made by the ForwardedRequestCustomizer or similar:

• This handler will use either only a single style of forwarded header. This is on the assumption that a trusted local proxy will produce only a single forwarded header and that any additional headers are likely from untrusted client side proxies.
• If multiple instances of a forwarded header are provided, this handler will use the right-most instance, which will have been set from the trusted local proxy

Requests in excess of the limit will be asynchronously suspended until a thread is available.

This is a simpler alternative to DosFilter

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.server.handler.AbstractHandler

AbstractHandler.ErrorDispatchHandler

Field Summary

Fields inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

_handler

Constructor Summary

Constructors

Constructor and Description
ThreadLimitHandler()
ThreadLimitHandler(java.lang.String forwardedHeader)
ThreadLimitHandler(java.lang.String forwardedHeader, boolean rfc7239)

Method Summary

Modifier and Type	Method and Description
protected void	doStart()
void	exclude(java.lang.String inetAddressPattern)
protected org.eclipse.jetty.server.handler.ThreadLimitHandler.Remote	getRemote(Request baseRequest)
protected java.lang.String	getRemoteIP(Request baseRequest)
int	getThreadLimit()
protected int	getThreadLimit(java.lang.String ip)
void	handle(java.lang.String target, Request baseRequest, HttpServletRequest request, HttpServletResponse response) Handle a request.
void	include(java.lang.String inetAddressPattern)
boolean	isEnabled()
void	setEnabled(boolean enabled)
void	setThreadLimit(int threadLimit)

Methods inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

destroy, expandChildren, getHandler, getHandlers, insertHandler, setHandler

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandlerContainer

expandHandler, findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass, setServer

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandler

doError, doStop, dumpThis, getServer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ThreadLimitHandler

public ThreadLimitHandler()

ThreadLimitHandler

public ThreadLimitHandler(java.lang.String forwardedHeader)

ThreadLimitHandler

public ThreadLimitHandler(java.lang.String forwardedHeader,
                          boolean rfc7239)

Method Detail

doStart

protected void doStart()
                throws java.lang.Exception

Overrides:

doStart in class AbstractHandler

Throws:

java.lang.Exception

isEnabled

public boolean isEnabled()

setEnabled

public void setEnabled(boolean enabled)

getThreadLimit

public int getThreadLimit()

setThreadLimit

public void setThreadLimit(int threadLimit)

include

public void include(java.lang.String inetAddressPattern)

exclude

public void exclude(java.lang.String inetAddressPattern)

handle

public void handle(java.lang.String target,
                   Request baseRequest,
                   HttpServletRequest request,
                   HttpServletResponse response)
            throws java.io.IOException,
                   ServletException

Description copied from interface: Handler

Handle a request.

Specified by:

handle in interface Handler

Overrides:

handle in class HandlerWrapper

Parameters:

target - The target of the request - either a URI or a name.

baseRequest - The original unwrapped request object.

request - The request either as the Request object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getRequest() method can be used access the Request object if required.

response - The response as the Response object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getResponse() method can be used access the Response object if required.

Throws:

java.io.IOException - if unable to handle the request or response processing

ServletException - if unable to handle the request or response due to underlying servlet issue

getThreadLimit

protected int getThreadLimit(java.lang.String ip)

getRemote

protected org.eclipse.jetty.server.handler.ThreadLimitHandler.Remote getRemote(Request baseRequest)

getRemoteIP

protected java.lang.String getRemoteIP(Request baseRequest)