VisualVM Secured JMXMP plugin

This VisualVM plugin add support for JMXMP secured with SASL login/password authentication.

This plugin allows to plug VisualVM to a Kubernetes pods running a JVM through a JMXMP single port-forwarded connection.

WARNING: Oracle JMXMP implementation is vulnerable to a deserialization vulnerability (see ACUNEXTIX Blog), so don't expose it to untrusted networks.

Build

mvn clean package

Usage

Start VisualVM with the following system properties:

visualvm 
    -cp:a /path/to/jmxremote_optional-repackaged-5.1.jar 
    -J-Djavax.net.ssl.trustStore=truststore.jks 
    -J-Djavax.net.ssl.trustStorePassword=changeit 
    -J-Djavax.net.ssl.trustStoreType=JKS
    -J-Djmxmp.username="cassandra"
    -J-Djmxmp.password="*********"

Install the JMXMP plugin for VisualVM:

Create a JMXMP connection:

Without jmxmp.username and jmxmp.password, visualVM prompts for a username and password.