You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@lucene.apache.org by "Andras Salamon (Jira)" <ji...@apache.org> on 2021/02/17 08:48:00 UTC

[jira] [Commented] (SOLR-13985) bind to localhost by default

    [ https://issues.apache.org/jira/browse/SOLR-13985?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17285717#comment-17285717 ] 

Andras Salamon commented on SOLR-13985:
---------------------------------------

It seems to me, after the revert a new version has been committed but the Jira is still in REOPENED status. Do we need some other changes?

A second question: Isn't it too strict to bind to localhost? It means that solr will not work out-of-the-box if I have multiple solr nodes.  Or the security concerns are more important?

> bind to localhost by default
> ----------------------------
>
>                 Key: SOLR-13985
>                 URL: https://issues.apache.org/jira/browse/SOLR-13985
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Robert Muir
>            Assignee: Jason Gerlowski
>            Priority: Major
>             Fix For: master (9.0)
>
>         Attachments: SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch, SOLR-13985.patch
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Currently solr binds to all interfaces by default. 
> The default should be safer, so that e.g. the user is not exposed to the internet until they make an explicit step to do so.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org