[jira] [Commented] (ACCUMULO-4019) thrift proxy no longer listening on all interfaces

["Dave Marion (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ACCUMULO-4019?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14944257#comment-14944257 ] 

Dave Marion commented on ACCUMULO-4019:
---------------------------------------

I think binding to all interfaces could be a security issue in some organizations. Can we make it configurable? Maybe default to all interfaces to fix the backwards compatibility issue? Then, file a ticket for a future release to change the default to localhost (forcing the user to change it)?

> thrift proxy no longer listening on all interfaces
> --------------------------------------------------
>
>                 Key: ACCUMULO-4019
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-4019
>             Project: Accumulo
>          Issue Type: Bug
>          Components: proxy
>    Affects Versions: 1.7.0
>            Reporter: Adam Fuchs
>
> In updating the thrift proxy to use HostAndPort-style configuration, we changed the behavior from listening on all interfaces to only listening on the canonical host name interface. This broke the proxy for some users:
> {code}
> -    TServer server = createProxyServer(AccumuloProxy.class, ProxyServer.class, port, protoFactoryClass, opts.prop);
> -    server.serve();
> +    HostAndPort address = HostAndPort.fromParts(InetAddress.getLocalHost().getCanonicalHostName(), port);
> +    ServerAddress server = createProxyServer(address, protoFactory, opts.prop);
> {code}
> Does anybody know what prompted this change? To fix this, I think we should hardcode it to listen to all interfaces. Would the correct way of doing that be to use the following address?:
> {code}
> HostAndPort address = HostAndPort.fromParts("::", port);
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)