Dear Igniters!
There have been quite a few inquiries from the community regarding Apache Ignite security issues, including a number of reports on what is perceived as Ignite’s vulnerabilities (for example, a possibility to carry out RCE attacks from a rouge thick client if that client can somehow connect to the cluster). That’s why it seems feasible to add a dedicated paragraph to Ignite’s documentation with a brief description of its basic security principles. Thus, the end users will be aware of how to avoid possible security issues when deploying and running Ignite clusters. The changes to the current documentation have been made in https://github.com/apache/ignite/pull/11277. Please have a look and share your thoughts on this matter. If there are no objections to the proposed draft, the PR will need to be merged to master. Regards, Oleg Valuyskiy