[SERVER-70262] Remove or reduce libmessage's dependency on multitenancy Created: 05/Oct/22  Updated: 05/Dec/22  Resolved: 29/Nov/22

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Siyuan Zhou Assignee: Backlog - Security Team
Resolution: Won't Do Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Related
is related to SERVER-70265 Build libmessage dynamic-sdk shared l... Closed
Assigned Teams:
Server Security
Participants:

 Description   

The Atlas Serverless 2 team plans to reuse the existing Server library libmessage to support the wire protocol in Serverless Proxy built on Envoy. However, libmessage has a dependency on the multitenancy library. This dependency added many indirect dependencies to the original ~20 mongo dependencies. This adds risks to integrating it into Serverless Proxy on a few aspects.
 

  • Library API - all the dependencies will be a part of the contract and accessible by library consumers.
  • Library behavior - we need to audit the behavior of the library, like the network library, to make sure they don't have side effects or security issues.
  • Code compatibility - there might be potential macro (more likely) and namespace (less likely) conflicts. Global variables and initialization could also affect the final executable.
  • Security risk - it will be a large surface of security risk.
  • Dev productivity - it will slow down the compilation.


 Comments   
Comment by Judah Schvimer [ 29/Nov/22 ]

This is no longer needed.

Generated at Thu Feb 08 06:15:42 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.