You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@flink.apache.org by "Chesnay Schepler (Jira)" <ji...@apache.org> on 2021/10/07 13:18:00 UTC

[jira] [Created] (FLINK-24474) Standalone clusters should bind to localhost by default

Chesnay Schepler created FLINK-24474:
----------------------------------------

             Summary: Standalone clusters should bind to localhost by default
                 Key: FLINK-24474
                 URL: https://issues.apache.org/jira/browse/FLINK-24474
             Project: Flink
          Issue Type: Improvement
          Components: Runtime / Configuration
            Reporter: Chesnay Schepler
            Assignee: Chesnay Schepler
             Fix For: 1.15.0


By default the REST endpoints bind to 0.0.0.0.

This is fine for docker use-cases as it simplifies the setup and the API isn't reachable unless the user explicitly enables that via docker.

However, for standalone clusters this is a different story, and it is currently too easy for users to accidentally expose their clusters to the outside world.

We should set the bind address by default to localhost, and change the docker-scripts to set this to 0.0.0.0 .



--
This message was sent by Atlassian Jira
(v8.3.4#803005)