[rrd-developers] rrdcached possible bug

[Adrian-Ioan Vasile]

On Apr 23, 2010, at 5:20 PM, Tobias Oetiker wrote:

> Hi Adrian,
> 
> Today Adrian-Ioan Vasile wrote:
> 
>> Hi all,
>> 
>> 1. I found an apparent bug in the journaling system of rrdcached.
>> When specifying a relative path (-j option) it would segfault
>> when trying to read past journals (journal_init function).
> 
>> 
>> So, for this reason, I added an extra check to journal_init
>> before reading the directory, and, when parsing the command line
>> options, to expand the relative path to an absolute path.
>> 
>> Here's the patch.
> 
> thanks
> 
>> 
>> 2. Why implement any security into rrdcached for the reason that
>> only authorized hosts may connect to it via tcp/udp and this can
>> be done with local tools such as iptables.
> 
> in my world, there may be multiple users with different security
> clerance working on a single host ... so the curent solution is not
> really sufficient ...
> 

While I agree with the need for security, I think it should be split from rrdcached.

I have to design a system that scales to inf, and the only way is to actually relay messages to multiple rrdcached hosts.

The approach of mogilefs or, to keep with the projects goals, graphite.

Introducing a relay component, one can:
- move the authentication to the relay
- simplify/optimize the cache system by moving the tree keys from strings to int (long), the relay will keep track of things
- and possibly move from glib (adds overhead and slows things down)


> cheers
> tobi
>> 
>> Thanks for this great product,
>> Adrian-Ioan Vasile
>> yoyo at opennet.ro
>> 
>> 
>> 
>> 
> 
> -- 
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
> http://it.oetiker.ch tobi at oetiker.ch ++41 62 775 9902 / sb: -9900

Thanks for the quick reply,
Adrian-Ioan Vasile
yoyo at opennet.ro