Q: How to effectively disable a service for catalog entry?

[FObersteiner]

Background: I maintain a publicly available THREDDS instance (docker setup; v5.6). It is running fine as long as I only allow the HTTPServer service. Other services caused repeated crashes. I'm in the process of figuring out what specifically causes the critical errors, which then cause crashes due to exhausted heap memory.

Q: is there a way to configure the THREDDS to only provide certain services for specific catalog entries via the catalog xml or threddsConfig xml? Please excuse my ignorance if I missed that in the documentation...

So far, my attempts to do this did not succeed; if a service is active in general via threddsConfig, it can be called for any catalog entry, if you know the URL to call it. It just doesn't appear on the landing page for the dataset entry. The only way to effectively block service access has been via the reverse proxy - which kind of duplicates work; I need to configure services in two locations, make sure this is in sync etc.

[lesserwhirls]

The only way to do this is at the Tomcat level or higher (last time I checked). The reason is that the individual data services do not know anything about the catalog service (the catalog service reads the configuration catalogs and uses that information to expose data service links within a client catalog). I need to take a look to see if that's still the case given some more recent changes to the way catalogs are generally managed.

In the meantime, are you using WMS on your server? If so, it may be related to this: #588.

[FObersteiner]

@lesserwhirls thanks for your reply! So I'll stick with the reverse-proxy solution for now which is working fine, it's just a bit more work.

In the meantime, are you using WMS on your server? If so, it may be related to this: #588.

I have both WMS and WCS disabled in the threddsConfig.xml. So that's probably not the issue. I had the NCISO services enabled, and the opendap service. That "reliably" caused crashes within ~24h, now I'm in the process of turning stuff on/off to see if I can reproduce the crashes. If I have useful results, I'll post them here / create another issue.