Restricting IP addresses for Jetty and Solr

by

Solr 4.2.1 uses Jetty 8.1.8. Jetty 8 (as noted by jonas789) doesn’t support .htaccess. Instead, it uses IPAccessHandler, which doesn’t have great documentation available. I had to play with it quite a bit to get it work, so I’m posting an updated solution here.

IPAccessHandler manages a blacklist and a whitelist, accepts arbitrary ranges of IPs, and supports attaching specific URI paths to each white/black -list entry. IPAccessHandler also subclasses HandlerWrapper, which turns out to be important.

The solr app still lives in a WebAppContext (as in Lyndsay’s solution), but a WebAppContext is now governed by a ContextHandler, which resides in a ContextHandlerCollection occupying the first handler slot in the server. To stop requests from the wrong IP from getting to the app, we need to wrap it inside an IPAccessHandler somewhere along that path. IPAccessHandler behaves oddly if it’s in the wrong spot: I tried inserting it before the context handlers and it gave 403 Forbidden to the wrong machines, threw NullPointerException tantrums with no additional error messages, all sorts of nonsense. I finally got it to work by wrapping the ContextHandlerCollection itself, at the server level.

Go to etc/jetty.xml and scroll to the handlers section. Then wrap the existing ContextHandlerCollection item as follows:

<!-- =========================================================== -->
<!-- Set handler Collection Structure                            --> 
<!-- =========================================================== -->
<Set name="handler">
  <New id="Handlers" class="org.eclipse.jetty.server.handler.HandlerCollection">
    <Set name="handlers">
     <Array type="org.eclipse.jetty.server.Handler">
   <Item>

     <!-- here begins the new stuff -->
     <New class="org.eclipse.jetty.server.handler.IPAccessHandler">
       <Call name="addWhite">
         <Arg>xxx.xxx.xxx.xxx</Arg>
       </Call>
       <Set name="handler">
         <!-- here's where you put what was there before: -->
         <New id="Contexts" class="org.eclipse.jetty.server.handler.ContextHandlerCollection"/>
       </Set>
     </New>
     <!-- here ends the new stuff -->

   </Item>
       <Item>
         <New id="DefaultHandler" class="org.eclipse.jetty.server.handler.DefaultHandler"/>
       </Item>
       <Item>
         <New id="RequestLog" class="org.eclipse.jetty.server.handler.RequestLogHandler"/>
       </Item>
     </Array>
    </Set>
  </New>
</Set>

Resources:

More Related Contents:

  1. How to track Solr Keywords when used in a search using Coldfusion 10 [closed]
  2. ElasticSearch, Sphinx, Lucene, Solr, Xapian. Which fits for which usage? [closed]
  3. Solr index vs stored
  4. How can I tell Solr to return the hit search terms per document?
  5. Solr Custom Similarity
  6. solrj api for partial document update
  7. Solr documents with child elements?
  8. How to query SOLR for empty fields?
  9. SOLR exact match boost over text containing the exact match
  10. solr suggester not returning any results
  11. Is it possible in solr to specify an ordering of documents
  12. Getting the IP address of the current machine using Java
  13. How to get the IP address of the docker host from inside a docker container [duplicate]
  14. Correct way of getting Client’s IP Addresses from http.Request
  15. how to change originating IP in HttpWebRequest
  16. How can I generate all possible IPs from a list of ip ranges in Python?
  17. How to add Access-Control-Allow-Origin to jetty server
  18. How to check if an IP address is from a particular network/netmask in Java?
  19. Identifying country by IP address
  20. could not find Factory: javax.faces.context.FacesContextFactory
  21. Can a raw Lucene index be loaded by Solr?
  22. Get my wifi ip address Android
  23. Validating IPv4 string in Java
  24. How do I serve https and http for Jetty from one port?
  25. How to identify server IP address in PHP
  26. Ban IPs from text file using htaccess [closed]
  27. create a domain name pointing to an IP of port different than 80
  28. IP address in windows phone 8
  29. Can’t access 127.0.0.1
  30. How do I get the external IP of my server using PHP?

Leave a Comment