Skip to content

[Backport v1.5] Fix: Akka.Remote should not shutdown on invalid TLS traffic#7952

Merged
Aaronontheweb merged 1 commit into
akkadotnet:v1.5from
Aaronontheweb:backport/v1.5-remote-tls-fix
Nov 25, 2025
Merged

[Backport v1.5] Fix: Akka.Remote should not shutdown on invalid TLS traffic#7952
Aaronontheweb merged 1 commit into
akkadotnet:v1.5from
Aaronontheweb:backport/v1.5-remote-tls-fix

Conversation

@Aaronontheweb

Copy link
Copy Markdown
Member

Summary

Backport of #7939 to v1.5 branch.

  • Prevents Akka.Remote from shutting down when receiving invalid TLS traffic

Original PR: #7939

@Aaronontheweb Aaronontheweb force-pushed the backport/v1.5-remote-tls-fix branch from 5a09173 to 46b1876 Compare November 25, 2025 17:24
…et#7939)

When TLS is enabled, invalid traffic (like HTTP requests) hitting the
Akka.Remote port would cause the entire ActorSystem to shut down with
exit code 79. This was due to overly aggressive TLS handshake failure
handling introduced in akkadotnet#7839.

Changes:
- Modified TcpTransport to only trigger CoordinatedShutdown for client-side
  TLS handshake failures (outbound connections we initiate)
- Server-side TLS failures (incoming invalid connections) now just log a
  warning and reject the connection without shutting down
- Added test to verify servers remain running when invalid traffic hits
  the TLS port

This makes Akka.Remote resilient to port scanners, misconfigured clients,
or malicious traffic while maintaining strict security for legitimate
connections.

Fixes akkadotnet#7938
@Aaronontheweb Aaronontheweb force-pushed the backport/v1.5-remote-tls-fix branch from 46b1876 to fea4231 Compare November 25, 2025 17:25
@Aaronontheweb Aaronontheweb merged commit 9601f62 into akkadotnet:v1.5 Nov 25, 2025
7 of 11 checks passed
@Aaronontheweb Aaronontheweb deleted the backport/v1.5-remote-tls-fix branch November 25, 2025 18:29
This was referenced May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant