[jira] [Commented] (SOLR-13985) bind to localhost by default

["Robert Muir (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16988513#comment-16988513 ] 

Robert Muir commented on SOLR-13985:
------------------------------------

This issue should be the one where everyone argues with me: its gonna be an enormous drain on documentation and the mailing list.

but it prevents idiots from exposing stuff without taking addl steps. So its not enough to make the defaults change here, there needs to be a "path" through the docs whereas users *securely* enable their solr instance to talk to the outside world.

Happy to help in any way I can! But we really gotta do this.

> bind to localhost by default
> ----------------------------
>
>                 Key: SOLR-13985
>                 URL: https://issues.apache.org/jira/browse/SOLR-13985
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Robert Muir
>            Priority: Major
>         Attachments: SOLR-13985.patch
>
>
> Currently solr binds to all interfaces by default. 
> The default should be safer, so that e.g. the user is not exposed to the internet until they make an explicit step to do so.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org