The Aspectow v4.1.0 release is a feature-rich minor update that significantly enhances Continuous Integration & Delivery (CI/CD) automation and remote lifecycle operations (Build & Deployment), introduces process-independent safe server restarts (Detached Server Restart), and strengthens enterprise security governance and compliance audit trails (Security & Compliance Audit).
Without relying on external deployment or CI/CD pipelines, Aspectow Console now provides a comprehensive control plane to perform Git source updates, compilation, configuration/web application deployment, and safe server restarts across the entire cluster or targeted individual nodes in a single, unified workflow.
✨ New Features
1. Remote Build & Deployment Pipelines (aspectow-console & aspectow-node)
- Multi-Node Cluster Remote Orchestration:
- Introduced
RemoteBuildDeployManagerandLocalScriptRunnerto coordinate and execute build/deploy scripts asynchronously across individual nodes, specific groups, all service nodes, or the entire cluster. - Utilizes Redis message bridges and WebSockets to stream real-time execution progress, status updates, and terminal outputs from multiple nodes concurrently back to the console.
- Introduced
- Standardized Step-by-Step Deployment Pipelines:
- Full Build & Deploy (
5-pull_build_deploy.sh): Executes Git Pull → Maven Compile & Package → Config Deploy → Webapps Deploy in a single automated pipeline. - Fast Deploy (
6-pull_deploy.sh): Performs Git source pull and direct asset/config deployment without triggering a full Maven recompilation. - Single-Step Pipelines: Allows granular execution of individual steps, such as Git Pull Only (
1-pull.sh), Maven Build Only (2-build.sh), Config Deploy Only (3-deploy_config.sh), and Webapps Deploy Only (4-deploy_webapps.sh). - Selective Partial Deployments: Provides specialized scripts for Config Only (
7-pull_deploy_config_only.sh), Webapps Only (8-pull_deploy_webapps_only.sh), and Combined Config + Webapps (9-pull_deploy_config_webapps_only.sh).
- Full Build & Deploy (
- Interactive Live Web Terminal Stream:
- ANSI Color Parsing & Rendering: Live streaming terminal parses and renders ANSI escape color codes directly in the web browser console.
- Multi-Node Tabbed Interface: Seamlessly switch between the aggregated All Nodes live output view and dedicated individual node terminal tabs.
- Terminal Usability Features: Includes auto-scroll toggling, one-click terminal clearing, log text downloading, and execution duration tickers.
- Pipeline Flow Preview: Displays a visual step-by-step badge preview of the selected deployment script before execution.
- Process-Independent Safe Server Restart (
DetachedRestartRunner):- Executes
daemon.sh restartwithin a detached OS session/process group (nohupand background detachment) so that the spawned restart command survives parent JVM termination. - Incorporates an intentional flush delay (
sleep 1) and standard I/O redirection to the null device (/dev/null/NUL), ensuring that terminal completion events and WebSocket notifications are reliably delivered before shutdown.
- Executes
- Live Daemon Log Viewer:
- Enables real-time on-demand inspection of
daemon-stderr.loganddaemon-stdout.logfrom target nodes directly in the console terminal to rapidly diagnose startup and deployment errors.
- Enables real-time on-demand inspection of
- Compliance Build Audit Trail (
BuildAuditTrail):- Persists comprehensive execution metadata to RDBMS storage, including unique Execution IDs, executing operators, target nodes, Git branch, before/after commit hashes, duration, exit codes, and full terminal log transcripts.
- Provides a dedicated modal view (
cluster/build/audit/) to search, inspect, and export historical build logs and audit trails.
2. Enterprise Security Governance & Hardening (aspectow-console)
- Brute-Force Attack Mitigation & Automatic Account Lockout:
- Tracks consecutive failed authentication attempts and automatically locks user accounts upon exceeding configurable thresholds.
- Session IP Binding:
- Binds authenticated sessions strictly to the originating client IP address, proactively mitigating session hijacking and credential replay attacks.
- User-Level IP Whitelisting:
- Restricts administrative access by allowing administrators to configure authorized IP and CIDR ranges on a per-user basis.
- Web Security Response Headers & Content Security Policy (CSP):
- Enforces standardized HTTP security response headers (
X-Frame-Options,X-Content-Type-Options,X-XSS-Protection,Content-Security-Policy) across all web endpoints to defend against clickjacking, MIME sniffing, and cross-site scripting (XSS).
- Enforces standardized HTTP security response headers (
- Enhanced Sensitive Data Masking:
- Automatically masks sensitive fields such as email addresses, client IPs, and secrets using regular expressions across administrative panels and diagnostic responses.
🚀 Improvements
1. Cluster Node Management & Telemetry (aspectow-node & aspectow-appmon)
- Dedicated Cluster Nodes Popup View (
cluster/nodes/popup/):- Inspect and manage cluster node health, roles, memory metrics, and uptimes in an independent popup window without interrupting ongoing console tasks.
- Self-Healing Node & Group Registry:
- Added reconciliation routines to automatically heal and synchronize Redis node registration states during transient network interruptions or unexpected node restarts.
- Extensible Geolocation & Session User Resolvers:
- Introduced plugin interfaces for client IP-to-country mapping (
CountryResolver) and active session user extraction (SessionUserResolver), powering deeper analytics.
- Introduced plugin interfaces for client IP-to-country mapping (
- Resilient WebSocket Connectivity & Exponential Backoff:
- Enhanced
console-client.jswith exponential backoff and connection state tracking for seamless automatic reconnects and fallback behavior.
- Enhanced
2. Operational Automation & Infrastructure Tooling
- Unified Daemon Management Script (
daemon-all.sh):- Manage multiple Aspectran daemon instances simultaneously (start, stop, restart, status) via a single unified script.
- Streamlines operations for multi-node deployments residing on the same host.
- Build Concurrency File Locking:
- Prevents file corruption and race conditions by enforcing file locks across Git pull and build script executions.
- Development Mode Flexibility (
DEV_MODE):- Added
DEV_MODEconfigurations to customize base directories and environment settings for streamlined local and staging development workflows.
- Added
3. Framework Foundation Upgrade
- Aspectran 9.6.5 runtime compatibility, stability, and performance enhancements.
Juho Jeong NEWS
Release