| Version | Supported |
|---|---|
| 0.1.x | Yes |
If you discover a security vulnerability in x-rpc, please report it responsibly.
Do not open a public GitHub issue for security vulnerabilities.
Instead, please send an email to the project maintainers via GitHub's private vulnerability reporting feature:
- Go to the Security tab of this repository.
- Click "Report a vulnerability".
- Provide a description of the vulnerability, steps to reproduce, and any potential impact.
We will acknowledge receipt within 48 hours and aim to provide a fix within 7 days for critical issues.
When deploying x-rpc in production:
- Network isolation: Run ZooKeeper and RPC services within a trusted network. x-rpc does not provide built-in encryption for RPC traffic.
- Access control: Use ZooKeeper ACLs to restrict registry access.
- Rate limiting: Configure TPS limits on both provider and consumer sides to prevent abuse.
- Monitoring: Use the management console and metrics to detect anomalous traffic patterns.