Brian Aker wrote:
Hi!

UDP and TCP are always enabled now. You don't have to do one or the other (and they both run on the same port, so you don't have to do some discovery from the client side).

For maximum security, they should probably both be disabled by default.

You should also consider a release taxonomy where these kinds of changes are not allowed unless there is a major (or minor) release number upgrade, and followed by a proper release note.

For most memcached environments, this is probably not an issue, but there may be some combinations of firewall policies and port number changes that accidentally cause a security issue.

Thanks,
Roy

Cheers,
    -Brian

On Jun 2, 2008, at 11:59 AM, Dustin Sallings wrote:

I believe so. Unless you specify a UNIX domain socket, you get a TCP port.


--
_______________________________________________________
Brian "Krow" Aker, brian at tangent.org
Seattle, Washington
http://krow.net/                     <-- Me
http://tangent.org/                <-- Software
_______________________________________________________
You can't grep a dead tree.



Reply via email to