[SERVER-41490] Disable OP_MSG checksums for TLS connections Created: 04/Jun/19  Updated: 29/Oct/23  Resolved: 26/Jun/19

Status: Closed
Project: Core Server
Component/s: Networking
Affects Version/s: None
Fix Version/s: 4.2.0-rc3, 4.3.1

Type: Bug Priority: Major - P3
Reporter: Mira Carey Assignee: Rahul Sundararaman (Inactive)
Resolution: Fixed Votes: 0
Labels: neweng
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
is depended on by DRIVERS-680 Disable OP_MSG checksums for TLS conn... Closed
is depended on by DRIVERS-2177 Disable OP_MSG checksums for TLS conn... Backlog
Documented
is documented by DOCS-12835 Investigate changes in SERVER-41490: ... Closed
Related
is related to SERVER-28679 Compute crc32c checksums on OP_MSG Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v4.2
Sprint: Service Arch 2019-06-17, Service Arch 2019-07-01
Participants:
Linked BF Score: 0

 Description   

We enabled OP_MSG checksums to catch data corruption on the wire in SERVER-28679.

This work of performing those checksums is extra cost though, and it is redundant when mixed with the hmacs required by tls.

We lose little on the data integrity side and avoid overhead if we only perform check sums on non-tls connections.



 Comments   
Comment by Githook User [ 27/Jun/19 ]

Author:

{'name': 'Rahul Sundararaman', 'username': 'rsbballguy', 'email': 'rahul.sundararaman@10gen.com'}

Message: SERVER-41490 Disable OP_MSG checksums for TLS connections
Branch: v4.2
https://github.com/mongodb/mongo/commit/92e377508f1656561b64a776faa9c05e7d3fa5bb

Comment by Githook User [ 26/Jun/19 ]

Author:

{'name': 'Rahul Sundararaman', 'username': 'rsbballguy', 'email': 'rahul.sundararaman@10gen.com'}

Message: SERVER-41490 Disable OP_MSG checksums for TLS connections
Branch: master
https://github.com/mongodb/mongo/commit/4d06ab3d983463ab1f593ef2d43554d8f095fd39

Comment by Mira Carey [ 04/Jun/19 ]

Link to the performance overhead of checksumming on non-tls connections

Generated at Thu Feb 08 04:57:52 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.