You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@zookeeper.apache.org by Andreas Mock <an...@drumedar.de> on 2025/04/11 12:48:51 UTC
How to disable non-SSL client port together with dynamic reconfiguration
Hi all,
is there a way to disable unsecured client port, when SSL is enabled in zookeeper 3.9.3?
Situation:
zoo.cfg has (besides other entries):
--------------------------------8<-----------------------------
secureClientPort=2182
dynamicConfigFile=/opt/zookeeper/conf/zoo.cfg.dynamic.100000000
--------------------------------8<-----------------------------
and /opt/zookeeper/conf/zoo.cfg.dynamic.100000000
has
--------------------------------8<-----------------------------
server.19=appl1:2888:3888:participant;0.0.0.0:2181
server.4=appl2:2888:3888:participant;0.0.0.0:2181
server.9=appl3:2888:3888:participant;0.0.0.0:2181
--------------------------------8<-----------------------------
This leads to zookeeper opening two client ports 2181 and 2182.
2182 is the secured one and works with SSL.
I want to get rid of the unsecured port 2181. How do I accomplish that?
Documentations says: "Specifying both enables mixed-mode while omitting either will disable that mode."
But clientPort is configured implicitly with the dynamic config.
Any hints welcome.
Best regards
Andreas