[GitHub] [nifi] exceptionfactory commented on a change in pull request #5264: NIFI-8964 Add Cluster Firewall Configuration to Admin Guide

[GitBox <gi...@apache.org>]

exceptionfactory commented on a change in pull request #5264:
URL: https://github.com/apache/nifi/pull/5264#discussion_r680575116



##########
File path: nifi-docs/src/main/asciidoc/administration-guide.adoc
##########
@@ -2003,6 +2003,31 @@ one of the nodes, and the User Interface should look similar to the following:
 
 image:ncm.png["Clustered User Interface"]
 
+[[cluster_firewall_configuration]]
+=== Cluster Firewall Configuration
+
+NiFi clustering supports network access restrictions using a custom firewall configuration.
+The `nifi.cluster.firewall.file` property can be configured with a path to a file containing hostnames, IP addresses, or
+subnets of permitted nodes. The Cluster Coordinator uses the configuration to determine whether to accept or reject
+heartbeats and connection requests from potential cluster members.
+
+The configuration file format expects one entry per line and ignores lines beginning with the `#` character. NiFi uses
+standard hostname resolution to convert names to IP addresses. The configuration file supports IPv4 addresses or subnet

Review comment:
       What do you think about changing it to read as follows?
   
   NiFi uses standard Java host name resolution to convert names to IP addresses. The Java host name resolution leverages a combination of local machine configuration and network services, such as DNS.




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@nifi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org