[ 
https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17009897#comment-17009897
 ] 

Uwe Schindler edited comment on SOLR-13985 at 1/7/20 4:51 PM:
--------------------------------------------------------------

The biggest question to me is: How does Solr get it's own IP address? How does 
it handle multiple addresses? Does it prefer IPv6 (I hope so)?

Sorry, too much automatism is a no-go. When you register a new node it should 
ask the user for its IPv4 or IPv6 address that gets published to zookeeper. 
Only in the localhost-only case it should send its own local address!

My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6 
world I use a separate address for every single service. So you can easily test 
thousands of nodes on a single machine all with different IPv6 addresses.


was (Author: thetaphi):
The biggest question to me is: How does Solr get it's own IP address? How does 
it handle multiple addresses? Does it prefer IPv6 (I hope so)?

Sorry, too much automatism is a no-go. When you register a new node it should 
ask the user for its IPv4 or IPv6 address that gets published to zookeeper. 
Only in the localhost-only case it should send its won local address!

My machines e.g. at Hetzner all have multiple IP addresses and in the IPv6 
world I use a separate address for every single service. So you can easily test 
thousands of nodes on a single machine all with different IPv6 addresses.

> bind to localhost by default
> ----------------------------
>
>                 Key: SOLR-13985
>                 URL: https://issues.apache.org/jira/browse/SOLR-13985
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Robert Muir
>            Assignee: Jason Gerlowski
>            Priority: Major
>             Fix For: master (9.0)
>
>         Attachments: SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch, 
> SOLR-13985.patch
>
>
> Currently solr binds to all interfaces by default. 
> The default should be safer, so that e.g. the user is not exposed to the 
> internet until they make an explicit step to do so.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to