stevedlawrence opened a new pull request #5746:
URL: https://github.com/apache/nifi/pull/5746


   #### Description of PR
   
   The NiFi and NiFi Bootstrap processes both bind to random ephemeral
   ports to allow for inter-process communication (e.g. shutdown, port,
   ping, etc.). However, the randomness of these ephemeral ports can pose
   challenges for some security policies and firewall rules.
   
   This adds two configuration options, nifi.bootstrap.listen.port and
   nifi.listener.bootstrap.port, that allow an administrator to define
   which ports the two processes should bind to for this communication,
   making it easier to define security policies. The options default to
   zero to maintain the current ephemeral port behavior.
   
   fixes bug NIFI-6740
   
   ### For all changes:
   - [X] Is there a JIRA ticket associated with this PR? Is it referenced  in 
the commit message?
   
   - [X] Does your PR title start with **NIFI-XXXX** where XXXX is the JIRA 
number you are trying to resolve? Pay particular attention to the hyphen "-" 
character.
   
   - [X] Has your PR been rebased against the latest commit within the target 
branch (typically `main`)?
   
   - [X] Is your initial contribution a single, squashed commit? _Additional 
commits in response to PR reviewer feedback should be made on this branch and 
pushed to allow change tracking. Do not `squash` or use `--force` when pushing 
to allow for clean monitoring of changes._
   
   ### For code changes:
   - [X] Have you ensured that the full suite of tests is executed via `mvn 
-Pcontrib-check clean install` at the root `nifi` folder?
   - [ ] Have you written or updated unit tests to verify your changes? *manual 
testing performed*
   - [X] Have you verified that the full build is successful on JDK 8?
   - [X] Have you verified that the full build is successful on JDK 11?
   - [ ] If adding new dependencies to the code, are these dependencies 
licensed in a way that is compatible for inclusion under [ASF 
2.0](http://www.apache.org/legal/resolved.html#category-a)? *no new depenencies*
   - [ ] If applicable, have you updated the `LICENSE` file, including the main 
`LICENSE` file under `nifi-assembly`?  *not applicable*
   - [ ] If applicable, have you updated the `NOTICE` file, including the main 
`NOTICE` file found under `nifi-assembly`? *not applicable*
   - [ ] If adding new Properties, have you added `.displayName` in addition to 
.name (programmatic access) for each of the new properties? *not applicable*
   
   ### For documentation related changes:
   - [X] Have you ensured that format looks appropriate for the output in which 
it is rendered?
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@nifi.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to