Skip to content

Conversation

@Aaronontheweb
Copy link
Member

Summary

Backport of #7939 to v1.5 branch.

  • Prevents Akka.Remote from shutting down when receiving invalid TLS traffic

Original PR: #7939

@Aaronontheweb Aaronontheweb force-pushed the backport/v1.5-remote-tls-fix branch from 5a09173 to 46b1876 Compare November 25, 2025 17:24
…et#7939)

When TLS is enabled, invalid traffic (like HTTP requests) hitting the
Akka.Remote port would cause the entire ActorSystem to shut down with
exit code 79. This was due to overly aggressive TLS handshake failure
handling introduced in akkadotnet#7839.

Changes:
- Modified TcpTransport to only trigger CoordinatedShutdown for client-side
  TLS handshake failures (outbound connections we initiate)
- Server-side TLS failures (incoming invalid connections) now just log a
  warning and reject the connection without shutting down
- Added test to verify servers remain running when invalid traffic hits
  the TLS port

This makes Akka.Remote resilient to port scanners, misconfigured clients,
or malicious traffic while maintaining strict security for legitimate
connections.

Fixes akkadotnet#7938
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant