Jetty 12.0.6 · org.eclipse.jetty.server.handler.ThreadLimitHandler

Handler to limit the threads per IP address for DOS protection

The ThreadLimitHandler applies a limit to the number of Threads that can be used simultaneously per remote IP address.

The handler makes a determination of the remote IP separately to any that may be made by the ForwardedRequestCustomizer or similar:

This handler will use only a single style of forwarded header. This is on the assumption that a trusted local proxy will produce only a single forwarded header and that any additional headers are likely from untrusted client side proxies.
If multiple instances of a forwarded header are provided, this handler will use the right-most instance, which will have been set from the trusted local proxy

Requests in excess of the limit will be asynchronously suspended until a thread is available.

Nested and Inner Type Summary

Modifier and Type	Class and Description
private static class	ThreadLimitHandler.AllocatedPermit
private static class	ThreadLimitHandler.FuturePermit
private static class	ThreadLimitHandler.LimitedRequest
private static class	ThreadLimitHandler.LimitedResponse
private static class	ThreadLimitHandler.NoopPermit
private static interface	ThreadLimitHandler.Permit
private static class	ThreadLimitHandler.Remote
private static class	ThreadLimitHandler.RFC7239

Modifier and Type	Field and Description
private volatile boolean	_enabled
private final String	_forwardedHeader
private final ConcurrentMap<String, ThreadLimitHandler.Remote>	_remotes
private final boolean	_rfc7239
private int	_threadLimit
private static final Logger	LOG Hides org.eclipse.jetty.server.handler.ConditionalHandler.LOG.

Access	Constructor and Description
public	ThreadLimitHandler()
public	ThreadLimitHandler(String forwardedHeader)
public	ThreadLimitHandler(String forwardedHeader, boolean rfc7239)
public	ThreadLimitHandler(Handler handler, String forwardedHeader, boolean rfc7239)

Modifier and Type	Method and Description
protected void	doStart() Overrides org.eclipse.jetty.server.handler.ConditionalHandler.doStart. Starts the managed lifecycle beans in the order they were added.
public void	exclude(String inetAddressPattern)
private String	getForwarded(Request request)
private ThreadLimitHandler.Remote	getRemote(Request baseRequest)
protected String	getRemoteIP(Request baseRequest)
public int	getThreadLimit()
protected int	getThreadLimit(String ip)
private String	getXForwardedFor(Request request)
public void	include(String inetAddressPattern)
public boolean	isEnabled()
public boolean	onConditionsMet(Request The request to handle request, Response The response to generate response, Callback The callback for completion callback) Implements abstract org.eclipse.jetty.server.handler.ConditionalHandler.onConditionsMet. Handle a request that has met the conditions.
protected boolean	onConditionsNotMet(Request The request to handle request, Response The response to generate response, Callback The callback for completion callback) Implements abstract org.eclipse.jetty.server.handler.ConditionalHandler.onConditionsNotMet. This method is called when the request has not met the conditions and is not to be handled by this handler.
public void	setEnabled(boolean enabled)
public void	setThreadLimit(int threadLimit)