[ https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17009897#comment-17009897 ]
Uwe Schindler edited comment on SOLR-13985 at 1/7/20 4:51 PM: -------------------------------------------------------------- The biggest question to me is: How does Solr get it's own IP address? How does it handle multiple addresses? Does it prefer IPv6 (I hope so)? Sorry, too much automatism is a no-go. When you register a new node it should ask the user for its IPv4 or IPv6 address that gets published to zookeeper. Only in the localhost-only case it should send its own local address! My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6 world I use a separate address for every single service. So you can easily test thousands of nodes on a single machine all with different IPv6 addresses. was (Author: thetaphi): The biggest question to me is: How does Solr get it's own IP address? How does it handle multiple addresses? Does it prefer IPv6 (I hope so)? Sorry, too much automatism is a no-go. When you register a new node it should ask the user for its IPv4 or IPv6 address that gets published to zookeeper. Only in the localhost-only case it should send its won local address! My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6 world I use a separate address for every single service. So you can easily test thousands of nodes on a single machine all with different IPv6 addresses. > bind to localhost by default > ---------------------------- > > Key: SOLR-13985 > URL: https://issues.apache.org/jira/browse/SOLR-13985 > Project: Solr > Issue Type: Improvement > Security Level: Public(Default Security Level. Issues are Public) > Reporter: Robert Muir > Assignee: Jason Gerlowski > Priority: Major > Fix For: master (9.0) > > Attachments: SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch, > SOLR-13985.patch > > > Currently solr binds to all interfaces by default. > The default should be safer, so that e.g. the user is not exposed to the > internet until they make an explicit step to do so. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org