[
https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17009897#comment-17009897
]
Uwe Schindler edited comment on SOLR-13985 at 1/7/20 4:51 PM:
--------------------------------------------------------------
The biggest question to me is: How does Solr get it's own IP address? How does
it handle multiple addresses? Does it prefer IPv6 (I hope so)?
Sorry, too much automatism is a no-go. When you register a new node it should
ask the user for its IPv4 or IPv6 address that gets published to zookeeper.
Only in the localhost-only case it should send its own local address!
My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6
world I use a separate address for every single service. So you can easily test
thousands of nodes on a single machine all with different IPv6 addresses.
was (Author: thetaphi):
The biggest question to me is: How does Solr get it's own IP address? How does
it handle multiple addresses? Does it prefer IPv6 (I hope so)?
Sorry, too much automatism is a no-go. When you register a new node it should
ask the user for its IPv4 or IPv6 address that gets published to zookeeper.
Only in the localhost-only case it should send its won local address!
My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6
world I use a separate address for every single service. So you can easily test
thousands of nodes on a single machine all with different IPv6 addresses.
> bind to localhost by default
> ----------------------------
>
> Key: SOLR-13985
> URL: https://issues.apache.org/jira/browse/SOLR-13985
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Reporter: Robert Muir
> Assignee: Jason Gerlowski
> Priority: Major
> Fix For: master (9.0)
>
> Attachments: SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch,
> SOLR-13985.patch
>
>
> Currently solr binds to all interfaces by default.
> The default should be safer, so that e.g. the user is not exposed to the
> internet until they make an explicit step to do so.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
