[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[THREDDS #IXX-362335]: Urgent: UMASS Production Tomcat/THREDDS server shut down due to flood of DNS requests

This archive contains answers to questions sent to Unidata support through mid-2025. Note that the archive is no longer being updated. We provide the archive for reference; many of the answers presented here remain technically correct, even if somewhat outdated. For the most up-to-date information on the use of NSF Unidata software and data services, please consult the Software Documentation first.

  • Subject: [THREDDS #IXX-362335]: Urgent: UMASS Production Tomcat/THREDDS server shut down due to flood of DNS requests
  • Date: Tue, 22 Apr 2014 09:41:03 -0600
Hi Rich,

Yes, anyone running any web server should be checking for and upgrading OpenSSL 
libraries.

The details will be different depending on the OS and such.

Ethan

> Are there things we should do to respond to Heartbleed on public
> THREDDS servers?
> 
> For folks running public IPython notebook servers, we received this
> advice:"If you run a public #IPython notebook server over HTTPS, shut
> it down, upgrade OpenSSL, regenerate your TLS certificate & restart."
> 
> Does the same apply to tomcat/thredds?
> 
> -Rich

Ticket Details
===================
Ticket ID: IXX-362335
Department: Support THREDDS
Priority: Normal
Status: Open