[SECURITY] Upgrade Netty to 4.1.63.Final

### Motivation

- addresses several CVEs

### Changes

- Upgrade Netty to 4.1.63.Final
- Upgrade netty-tcnative-boringssl-static to 2.0.36.Final
- adapt API deprecation in PooledByteBufAllocator API

Reviewers: Lari Hotari <None>, Andrey Yegorov <None>, Enrico Olivelli <eolivelli@gmail.com>, Matteo Merli <mmerli@apache.org>

This closes #2696 from lhotari/lh-upgrade-Netty-4.1.63.Final and squashes the following commits:

6003a374d [Lari Hotari] Experiment: exclude TLSv1.3 from testing
fcbd707a6 [Lari Hotari] Handle TLS connection problems when TLSv1.3 is used
86788ef35 [Lari Hotari] [Security] Upgrade Netty to 4.1.63.Final
b606da7bc [Lari Hotari] Upgrade Lombok to 1.18.20
0f22d238c [Andrey Yegorov] fix: Bookkeeper client throttling logic is based upon entryId instead of ledgerId
e5e76667b [YANGLiiN] [DOC] fix the no striping occurs condition to Qw=E
diff --git a/bookkeeper-common-allocator/src/main/java/org/apache/bookkeeper/common/allocator/impl/ByteBufAllocatorImpl.java b/bookkeeper-common-allocator/src/main/java/org/apache/bookkeeper/common/allocator/impl/ByteBufAllocatorImpl.java
index 1889eb9..d6c98a9 100644
--- a/bookkeeper-common-allocator/src/main/java/org/apache/bookkeeper/common/allocator/impl/ByteBufAllocatorImpl.java
+++ b/bookkeeper-common-allocator/src/main/java/org/apache/bookkeeper/common/allocator/impl/ByteBufAllocatorImpl.java
@@ -78,7 +78,6 @@
                             poolingConcurrency /* nDirectArena */,
                             PooledByteBufAllocator.defaultPageSize(),
                             PooledByteBufAllocator.defaultMaxOrder(),
-                            PooledByteBufAllocator.defaultTinyCacheSize(),
                             PooledByteBufAllocator.defaultSmallCacheSize(),
                             PooledByteBufAllocator.defaultNormalCacheSize(),
                             PooledByteBufAllocator.defaultUseCacheForAllThreads());
diff --git a/bookkeeper-dist/all/build.gradle b/bookkeeper-dist/all/build.gradle
index de4c09e..9252105 100644
--- a/bookkeeper-dist/all/build.gradle
+++ b/bookkeeper-dist/all/build.gradle
@@ -64,7 +64,7 @@
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
         "bouncycastle-1.0.2/LICENSE.html",
         "jsr-305/LICENSE",
-        "netty-4.1.50.Final/*",
+        "netty-4.1.63.Final/*",
         "paranamer-2.8/LICENSE.txt",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/bkctl/build.gradle b/bookkeeper-dist/bkctl/build.gradle
index 4d287c9..23605ca 100644
--- a/bookkeeper-dist/bkctl/build.gradle
+++ b/bookkeeper-dist/bkctl/build.gradle
@@ -36,7 +36,7 @@
         "checker-qual-3.5.0/LICENSE",
         "google-auth-library-credentials-0.20.0/LICENSE",
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
-        "netty-4.1.50.Final/*",
+        "netty-4.1.63.Final/*",
         "bouncycastle-1.0.2/LICENSE.html",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/server/build.gradle b/bookkeeper-dist/server/build.gradle
index 7011172..6b32e3d 100644
--- a/bookkeeper-dist/server/build.gradle
+++ b/bookkeeper-dist/server/build.gradle
@@ -60,7 +60,7 @@
         "checker-qual-3.5.0/LICENSE",
         "google-auth-library-credentials-0.20.0/LICENSE",
         "javax.servlet-api-4.0.0/CDDL+GPL-1.1",
-        "netty-4.1.50.Final/*",
+        "netty-4.1.63.Final/*",
         "bouncycastle-1.0.2/LICENSE.html",
         "protobuf-3.14.0/LICENSE",
         "protobuf-3.12.0/LICENSE",
diff --git a/bookkeeper-dist/src/assemble/bin-all.xml b/bookkeeper-dist/src/assemble/bin-all.xml
index aa4d58b..af03d6d 100644
--- a/bookkeeper-dist/src/assemble/bin-all.xml
+++ b/bookkeeper-dist/src/assemble/bin-all.xml
@@ -59,7 +59,7 @@
         <include>javax.servlet-api-4.0.0/CDDL+GPL-1.1</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>jsr-305/LICENSE</include>
-        <include>netty-4.1.50.Final/*</include>
+        <include>netty-4.1.63.Final/*</include>
         <include>paranamer-2.8/LICENSE.txt</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/assemble/bin-server.xml b/bookkeeper-dist/src/assemble/bin-server.xml
index f54f1e5..3e39afb 100644
--- a/bookkeeper-dist/src/assemble/bin-server.xml
+++ b/bookkeeper-dist/src/assemble/bin-server.xml
@@ -52,7 +52,7 @@
         <include>checker-qual-3.5.0/LICENSE</include>
         <include>google-auth-library-credentials-0.20.0/LICENSE</include>
         <include>javax.servlet-api-4.0.0/CDDL+GPL-1.1</include>
-        <include>netty-4.1.50.Final/*</include>
+        <include>netty-4.1.63.Final/*</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/assemble/bkctl.xml b/bookkeeper-dist/src/assemble/bkctl.xml
index 84022e7..5e67dd3 100644
--- a/bookkeeper-dist/src/assemble/bkctl.xml
+++ b/bookkeeper-dist/src/assemble/bkctl.xml
@@ -66,7 +66,7 @@
       <includes>
         <include>checker-qual-3.5.0/LICENSE</include>
         <include>google-auth-library-credentials-0.20.0/LICENSE</include>
-        <include>netty-4.1.50.Final/*</include>
+        <include>netty-4.1.63.Final/*</include>
         <include>bouncycastle-1.0.2/LICENSE.html</include>
         <include>protobuf-3.14.0/LICENSE</include>
         <include>protobuf-3.12.0/LICENSE</include>
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index c20cb15..5b16743 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -217,21 +217,21 @@
 - lib/commons-io-commons-io-2.4.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar [11]
-- lib/io.netty-netty-common-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.50.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.50.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.50.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
+- lib/io.netty-netty-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_common-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.8.1.jar [12]
@@ -313,7 +313,7 @@
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.50.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
 [12] Source available at https://github.com/prometheus/client_java/tree/parent-0.8.1
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/3.5.3
 [14] Source available at https://github.com/vert-x3/vertx-bridge-common/tree/3.5.3
@@ -354,229 +354,229 @@
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.50.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.50.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
index fd3de48..3d03b23 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -217,19 +217,19 @@
 - lib/commons-io-commons-io-2.4.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar [11]
-- lib/io.netty-netty-common-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.50.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.50.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
+- lib/io.netty-netty-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
 - lib/log4j-log4j-1.2.17.jar [16]
 - lib/net.java.dev.jna-jna-3.2.7.jar [17]
 - lib/org.apache.commons-commons-collections4-4.1.jar [18]
@@ -292,7 +292,7 @@
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.50.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
 [16] Source available at http://logging.apache.org/log4j/1.2/download.html
 [17] Source available at https://github.com/java-native-access/jna/tree/3.2.7
 [18] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-collections.git;a=tag;h=a3a5ad
@@ -325,229 +325,229 @@
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.50.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.50.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index 3bd080f..a2e614b 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -217,21 +217,21 @@
 - lib/commons-io-commons-io-2.4.jar [8]
 - lib/commons-lang-commons-lang-2.6.jar [9]
 - lib/commons-logging-commons-logging-1.1.1.jar [10]
-- lib/io.netty-netty-buffer-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-dns-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar [11]
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar [11]
-- lib/io.netty-netty-common-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-4.1.50.Final.jar [11]
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar [11]
-- lib/io.netty-netty-resolver-4.1.50.Final.jar [11]
-- lib/io.netty-netty-resolver-dns-4.1.50.Final.jar [11]
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar [11]
-- lib/io.netty-netty-transport-4.1.50.Final.jar [11]
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar [11]
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar [11]
+- lib/io.netty-netty-buffer-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-dns-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar [11]
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar [11]
+- lib/io.netty-netty-common-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-4.1.63.Final.jar [11]
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar [11]
+- lib/io.netty-netty-resolver-4.1.63.Final.jar [11]
+- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar [11]
+- lib/io.netty-netty-transport-4.1.63.Final.jar [11]
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar [11]
 - lib/io.prometheus-simpleclient-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_common-0.8.1.jar [12]
 - lib/io.prometheus-simpleclient_hotspot-0.8.1.jar [12]
@@ -311,7 +311,7 @@
 [8] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-io.git;a=tag;h=603579
 [9] Source available at https://git-wip-us.apache.org/repos/asf?p=commons-lang.git;a=tag;h=375459
 [10] Source available at http://svn.apache.org/viewvc/commons/proper/logging/tags/commons-logging-1.1.1/
-[11] Source available at https://github.com/netty/netty/tree/netty-4.1.50.Final
+[11] Source available at https://github.com/netty/netty/tree/netty-4.1.63.Final
 [12] Source available at https://github.com/prometheus/client_java/tree/parent-0.8.1
 [13] Source available at https://github.com/vert-x3/vertx-auth/tree/3.5.3
 [14] Source available at https://github.com/vert-x3/vertx-bridge-common/tree/3.5.3
@@ -352,229 +352,229 @@
 [50] Source available at https://github.com/google/snappy/releases/tag/1.1.7
 
 ------------------------------------------------------------------------------------
-lib/io.netty-netty-codec-4.1.50.Final.jar bundles some 3rd party dependencies
+lib/io.netty-netty-codec-4.1.63.Final.jar bundles some 3rd party dependencies
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the extensions to Java Collections Framework which has
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the extensions to Java Collections Framework which has
 been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jsr166y.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.jsr166y.txt (Public Domain)
   * HOMEPAGE:
     * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
     * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of Robert Harder's Public Domain
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of Robert Harder's Public Domain
 Base64 Encoder and Decoder, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.base64.txt (Public Domain)
+    * deps/netty-4.1.63.Final/LICENSE.base64.txt (Public Domain)
   * HOMEPAGE:
     * http://iharder.sourceforge.net/current/java/base64/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Webbit', an event based
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Webbit', an event based
 WebSocket and HTTP server, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.webbit.txt (BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.webbit.txt (BSD License)
   * HOMEPAGE:
     * https://github.com/joewalnes/webbit
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'SLF4J', a simple logging
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'SLF4J', a simple logging
 facade for Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.slf4j.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.slf4j.txt (MIT License)
   * HOMEPAGE:
     * http://www.slf4j.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Harmony', an open source
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Harmony', an open source
 Java SE, which can be obtained at:
 
   * NOTICE:
-    * deps/netty-4.1.50.Final/NOTICE.harmony.txt
+    * deps/netty-4.1.63.Final/NOTICE.harmony.txt
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.harmony.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.harmony.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://archive.apache.org/dist/harmony/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jbzip2', a Java bzip2 compression
 and decompression library written by Matthew J. Francis. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jbzip2.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jbzip2.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jbzip2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'libdivsufsort', a C API library to construct
 the suffix array and the Burrows-Wheeler transformed string for any input string of
 a constant-size alphabet written by Yuta Mori. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.libdivsufsort.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/y-256/libdivsufsort
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of Nitsan Wakart's 'JCTools',
 Java Concurrency Tools for the JVM, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jctools.txt (ASL2 License)
+    * deps/netty-4.1.63.Final/LICENSE.jctools.txt (ASL2 License)
   * HOMEPAGE:
     * https://github.com/JCTools/JCTools
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JZlib', a re-implementation of zlib in
 pure Java, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jzlib.txt (BSD style License)
+    * deps/netty-4.1.63.Final/LICENSE.jzlib.txt (BSD style License)
   * HOMEPAGE:
     * http://www.jcraft.com/jzlib/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Compress-LZF', a Java library for encoding and
 decoding data in LZF format, written by Tatu Saloranta. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/ning/compress
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lz4', a LZ4 Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lz4', a LZ4 Java compression
 and decompression library written by Adrien Grand. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lz4.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lz4.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jpountz/lz4-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'lzma-java', a LZMA Java compression
 and decompression library, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.lzma-java.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.lzma-java.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jponge/lzma-java
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'jfastlz', a Java port of FastLZ compression
 and decompression library written by William Kinney. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jfastlz.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.jfastlz.txt (MIT License)
   * HOMEPAGE:
     * https://code.google.com/p/jfastlz/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of and optionally depends on 'Protocol Buffers',
 Google's data interchange format, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.protobuf.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.protobuf.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/protobuf
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Bouncy Castle Crypto APIs' to generate
 a temporary self-signed X.509 certificate when the JVM does not provide the
 equivalent functionality.  It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.bouncycastle.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt (MIT License)
   * HOMEPAGE:
     * http://www.bouncycastle.org/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Snappy', a compression library produced
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Snappy', a compression library produced
 by Google Inc, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.snappy.txt (New BSD License)
+    * deps/netty-4.1.63.Final/LICENSE.snappy.txt (New BSD License)
   * HOMEPAGE:
     * https://github.com/google/snappy
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'JBoss Marshalling', an alternative Java
 serialization API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/jboss-remoting/jboss-marshalling
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Caliper', Google's micro-
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Caliper', Google's micro-
 benchmarking framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.caliper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.caliper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/google/caliper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Commons Logging', a logging
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Commons Logging', a logging
 framework, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-logging.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-logging.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://commons.apache.org/logging/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Apache Log4J', a logging framework, which
 can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.log4j.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.log4j.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://logging.apache.org/log4j/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
+lib/io.netty-netty-codec-4.1.63.Final.jar optionally depends on 'Aalto XML', an ultra-high performance
 non-blocking XML processor, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://wiki.fasterxml.com/AaltoHome
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Twitter. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hpack.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.hpack.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/twitter/hpack
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Cory Benfield. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.hyper-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/python-hyper/hpack/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified version of 'HPACK', a Java implementation of
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified version of 'HPACK', a Java implementation of
 the HTTP/2 HPACK algorithm written by Tatsuhiro Tsujikawa. It can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.nghttp2-hpack.txt (MIT License)
+    * deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt (MIT License)
   * HOMEPAGE:
     * https://github.com/nghttp2/nghttp2/
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
+lib/io.netty-netty-codec-4.1.63.Final.jar contains a modified portion of 'Apache Commons Lang', a Java library
 provides utilities for the java.lang API, which can be obtained at:
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.commons-lang.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.commons-lang.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://commons.apache.org/proper/commons-lang/
 
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the Maven wrapper scripts from 'Maven Wrapper',
 that provides an easy way to ensure a user has everything necessary to run the Maven build.
 
   * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt (Apache License 2.0)
   * HOMEPAGE:
     * https://github.com/takari/maven-wrapper
 
-lib/io.netty-netty-codec-4.1.50.Final.jar contains the dnsinfo.h header file,
+lib/io.netty-netty-codec-4.1.63.Final.jar contains the dnsinfo.h header file,
 that provides a way to retrieve the system DNS configuration on MacOS.
 This private header is also used by Apple's open source
  mDNSResponder (https://opensource.apple.com/tarballs/mDNSResponder/).
 
  * LICENSE:
-    * deps/netty-4.1.50.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
+    * deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt (Apache License 2.0)
   * HOMEPAGE:
     * http://www.opensource.apple.com/source/configd/configd-453.19/dnsinfo/dnsinfo.h
 
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
index 170f28d..290cb17 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
@@ -22,21 +22,21 @@
     http://creativecommons.org/publicdomain/zero/1.0/
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.50.Final.jar
-- lib/io.netty-netty-codec-4.1.50.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar
-- lib/io.netty-netty-common-4.1.50.Final.jar
-- lib/io.netty-netty-handler-4.1.50.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar
-- lib/io.netty-netty-resolver-4.1.50.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.50.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar
-- lib/io.netty-netty-transport-4.1.50.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar
+- lib/io.netty-netty-buffer-4.1.63.Final.jar
+- lib/io.netty-netty-codec-4.1.63.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
+- lib/io.netty-netty-common-4.1.63.Final.jar
+- lib/io.netty-netty-handler-4.1.63.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
+- lib/io.netty-netty-resolver-4.1.63.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
+- lib/io.netty-netty-transport-4.1.63.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
index cf79bd6..182a88f 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
@@ -5,19 +5,19 @@
 The Apache Software Foundation (http://www.apache.org/).
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.50.Final.jar
-- lib/io.netty-netty-codec-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar
-- lib/io.netty-netty-common-4.1.50.Final.jar
-- lib/io.netty-netty-handler-4.1.50.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar
-- lib/io.netty-netty-resolver-4.1.50.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar
-- lib/io.netty-netty-transport-4.1.50.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar
+- lib/io.netty-netty-buffer-4.1.63.Final.jar
+- lib/io.netty-netty-codec-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
+- lib/io.netty-netty-common-4.1.63.Final.jar
+- lib/io.netty-netty-handler-4.1.63.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
+- lib/io.netty-netty-resolver-4.1.63.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
+- lib/io.netty-netty-transport-4.1.63.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
index 2db3eda..72b7344 100644
--- a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
@@ -5,21 +5,21 @@
 The Apache Software Foundation (http://www.apache.org/).
 
 ------------------------------------------------------------------------------------
-- lib/io.netty-netty-buffer-4.1.50.Final.jar
-- lib/io.netty-netty-codec-4.1.50.Final.jar
-- lib/io.netty-netty-codec-dns-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http-4.1.50.Final.jar
-- lib/io.netty-netty-codec-http2-4.1.50.Final.jar
-- lib/io.netty-netty-codec-socks-4.1.50.Final.jar
-- lib/io.netty-netty-common-4.1.50.Final.jar
-- lib/io.netty-netty-handler-4.1.50.Final.jar
-- lib/io.netty-netty-handler-proxy-4.1.50.Final.jar
-- lib/io.netty-netty-resolver-4.1.50.Final.jar
-- lib/io.netty-netty-resolver-dns-4.1.50.Final.jar
-- lib/io.netty-netty-tcnative-boringssl-static-2.0.31.Final.jar
-- lib/io.netty-netty-transport-4.1.50.Final.jar
-- lib/io.netty-netty-transport-native-epoll-4.1.50.Final-linux-x86_64.jar
-- lib/io.netty-netty-transport-native-unix-common-4.1.50.Final.jar
+- lib/io.netty-netty-buffer-4.1.63.Final.jar
+- lib/io.netty-netty-codec-4.1.63.Final.jar
+- lib/io.netty-netty-codec-dns-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http-4.1.63.Final.jar
+- lib/io.netty-netty-codec-http2-4.1.63.Final.jar
+- lib/io.netty-netty-codec-socks-4.1.63.Final.jar
+- lib/io.netty-netty-common-4.1.63.Final.jar
+- lib/io.netty-netty-handler-4.1.63.Final.jar
+- lib/io.netty-netty-handler-proxy-4.1.63.Final.jar
+- lib/io.netty-netty-resolver-4.1.63.Final.jar
+- lib/io.netty-netty-resolver-dns-4.1.63.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.38.Final.jar
+- lib/io.netty-netty-transport-4.1.63.Final.jar
+- lib/io.netty-netty-transport-native-epoll-4.1.63.Final-linux-x86_64.jar
+- lib/io.netty-netty-transport-native-unix-common-4.1.63.Final.jar
 
 
                             The Netty Project
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.aalto-xml.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.aalto-xml.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.aalto-xml.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.base64.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.base64.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.base64.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.base64.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.bouncycastle.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.bouncycastle.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.bouncycastle.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.caliper.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.caliper.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.caliper.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.caliper.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.commons-lang.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-lang.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.commons-lang.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-lang.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.commons-logging.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-logging.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.commons-logging.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.commons-logging.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.compress-lzf.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.compress-lzf.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.compress-lzf.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.dnsinfo.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.dnsinfo.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.dnsinfo.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.harmony.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.harmony.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.harmony.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.harmony.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.hyper-hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.hyper-hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.hyper-hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jboss-marshalling.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jboss-marshalling.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jboss-marshalling.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jbzip2.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jbzip2.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jbzip2.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jbzip2.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jctools.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jctools.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jctools.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jctools.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jfastlz.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jfastlz.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jfastlz.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jfastlz.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jsr166y.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jsr166y.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jsr166y.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jsr166y.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jzlib.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jzlib.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.jzlib.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.jzlib.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.libdivsufsort.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.libdivsufsort.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.libdivsufsort.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.log4j.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.log4j.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.log4j.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.log4j.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.lz4.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lz4.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.lz4.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lz4.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.lzma-java.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lzma-java.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.lzma-java.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.lzma-java.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.mvn-wrapper.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.mvn-wrapper.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.mvn-wrapper.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.nghttp2-hpack.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.nghttp2-hpack.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.nghttp2-hpack.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.protobuf.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.protobuf.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.protobuf.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.protobuf.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.slf4j.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.slf4j.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.slf4j.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.slf4j.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.snappy.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.snappy.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.snappy.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.snappy.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.webbit.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.webbit.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/LICENSE.webbit.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/LICENSE.webbit.txt
diff --git a/bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/NOTICE.harmony.txt b/bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/NOTICE.harmony.txt
similarity index 100%
rename from bookkeeper-dist/src/main/resources/deps/netty-4.1.50.Final/NOTICE.harmony.txt
rename to bookkeeper-dist/src/main/resources/deps/netty-4.1.63.Final/NOTICE.harmony.txt
diff --git a/bookkeeper-server/src/main/java/org/apache/bookkeeper/proto/PerChannelBookieClient.java b/bookkeeper-server/src/main/java/org/apache/bookkeeper/proto/PerChannelBookieClient.java
index c1fc78e..89863a3 100644
--- a/bookkeeper-server/src/main/java/org/apache/bookkeeper/proto/PerChannelBookieClient.java
+++ b/bookkeeper-server/src/main/java/org/apache/bookkeeper/proto/PerChannelBookieClient.java
@@ -19,13 +19,11 @@
 package org.apache.bookkeeper.proto;
 
 import static org.apache.bookkeeper.client.LedgerHandle.INVALID_ENTRY_ID;
-
 import com.google.common.base.Joiner;
 import com.google.common.collect.Sets;
 import com.google.protobuf.ByteString;
 import com.google.protobuf.ExtensionRegistry;
 import com.google.protobuf.UnsafeByteOperations;
-
 import io.netty.bootstrap.Bootstrap;
 import io.netty.buffer.ByteBuf;
 import io.netty.buffer.ByteBufAllocator;
@@ -60,7 +58,6 @@
 import io.netty.util.Recycler.Handle;
 import io.netty.util.concurrent.Future;
 import io.netty.util.concurrent.GenericFutureListener;
-
 import java.io.IOException;
 import java.net.SocketAddress;
 import java.net.UnknownHostException;
@@ -82,11 +79,9 @@
 import java.util.concurrent.atomic.AtomicLong;
 import java.util.concurrent.locks.ReentrantReadWriteLock;
 import java.util.function.BiPredicate;
-
-import javax.net.ssl.SSLHandshakeException;
+import javax.net.ssl.SSLException;
 import javax.net.ssl.SSLPeerUnverifiedException;
 import lombok.SneakyThrows;
-
 import org.apache.bookkeeper.auth.BookKeeperPrincipal;
 import org.apache.bookkeeper.auth.ClientAuthProvider;
 import org.apache.bookkeeper.client.BKException;
@@ -1282,7 +1277,10 @@
             return;
         }
 
-        if (cause instanceof DecoderException && cause.getCause() instanceof SSLHandshakeException) {
+        // TLSv1.3 doesn't throw SSLHandshakeException for certificate issues
+        // see https://stackoverflow.com/a/62465859 for details about the reason
+        // therefore catch SSLException to also cover TLSv1.3
+        if (cause instanceof DecoderException && cause.getCause() instanceof SSLException) {
             LOG.error("TLS handshake failed", cause);
             errorOutPendingOps(BKException.Code.SecurityException);
             Channel c = ctx.channel();
diff --git a/bookkeeper-server/src/test/java/org/apache/bookkeeper/conf/TestBKConfiguration.java b/bookkeeper-server/src/test/java/org/apache/bookkeeper/conf/TestBKConfiguration.java
index f993e20..47e46e5 100644
--- a/bookkeeper-server/src/test/java/org/apache/bookkeeper/conf/TestBKConfiguration.java
+++ b/bookkeeper-server/src/test/java/org/apache/bookkeeper/conf/TestBKConfiguration.java
@@ -47,6 +47,7 @@
      */
     public static ServerConfiguration newServerConfiguration() {
         ServerConfiguration confReturn = new ServerConfiguration();
+        confReturn.setTLSEnabledProtocols("TLSv1.2,TLSv1.1");
         confReturn.setJournalFlushWhenQueueEmpty(true);
         // enable journal format version
         confReturn.setJournalFormatVersionToWrite(5);
@@ -83,4 +84,10 @@
         serverConf.setAllowLoopback(true);
         return serverConf;
     }
+
+    public static ClientConfiguration newClientConfiguration() {
+        ClientConfiguration clientConfiguration = new ClientConfiguration();
+        clientConfiguration.setTLSEnabledProtocols("TLSv1.2,TLSv1.1");
+        return clientConfiguration;
+    }
 }
diff --git a/bookkeeper-server/src/test/java/org/apache/bookkeeper/test/BookKeeperClusterTestCase.java b/bookkeeper-server/src/test/java/org/apache/bookkeeper/test/BookKeeperClusterTestCase.java
index 35f0364..685544a 100644
--- a/bookkeeper-server/src/test/java/org/apache/bookkeeper/test/BookKeeperClusterTestCase.java
+++ b/bookkeeper-server/src/test/java/org/apache/bookkeeper/test/BookKeeperClusterTestCase.java
@@ -108,7 +108,7 @@
      * bind to loopback address.
      */
     protected final ServerConfiguration baseConf = TestBKConfiguration.newServerConfiguration();
-    protected final ClientConfiguration baseClientConf = new ClientConfiguration();
+    protected final ClientConfiguration baseClientConf = TestBKConfiguration.newClientConfiguration();
 
     private final Map<BookieServer, AutoRecoveryMain> autoRecoveryProcesses = new HashMap<>();
 
diff --git a/dependencies.gradle b/dependencies.gradle
index 84a60fa..9080ca2 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -62,8 +62,8 @@
     lombok: "1.18.20",
     lz4: "1.3.0",
     mockito: "3.0.0",
-    netty: "4.1.32.Final",
-    nettyTcnativeBoringSsl: "2.0.31.Final",
+    netty: "4.1.63.Final",
+    nettyTcnativeBoringSsl: "2.0.38.Final",
     powermock: "2.0.2",
     prometheus: "0.0.21",
     protobuf: "3.14.0",
diff --git a/pom.xml b/pom.xml
index 4f4cdbf..ac6730b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -148,8 +148,8 @@
     <lombok.version>1.18.20</lombok.version>
     <lz4.version>1.3.0</lz4.version>
     <mockito.version>3.0.0</mockito.version>
-    <netty.version>4.1.50.Final</netty.version>
-    <netty-boringssl.version>2.0.31.Final</netty-boringssl.version>
+    <netty.version>4.1.63.Final</netty.version>
+    <netty-boringssl.version>2.0.38.Final</netty-boringssl.version>
     <ostrich.version>9.1.3</ostrich.version>
     <powermock.version>2.0.2</powermock.version>
     <prometheus.version>0.8.1</prometheus.version>