[CASSANDRA-7087] Use JMX_PORT for the RMI port to simplify nodetool connectivity

• Type: Improvement
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 2.0.8, 2.1 beta2
• Component/s: Local/Config
• Labels: security
• Assignee: Chris Lohfink
• Reporter: Chris Lohfink

Authors

Chris Lohfink

Reviewers

Brandon Williams

• Created: 24/Apr/14 19:20
• Updated: 16/Apr/19 09:31
• Resolved: 24/Apr/14 19:54

Description

Mentioned in the user list by Steven Robenalt there is a config option in Java7 to allow configuring the port used for the followup rmi connection in JMX. It simplifies things a lot to have both connections use 7199 since it could be reused for both.

There's a little-known change in the way JMX uses ports that was add to JDK7u4 which simplifies the use of JMX in a firewalled environment. The standard RMI registry port for JMX is controlled by the com.sun.management.jmxremote.port property. The change to Java 7 was to introduce the related com.sun.management.jmxremote.rmi.port property, Setting this second property means that JMX will use that second port, rather than a randomly assigned port, for making the actual connection. This solution works well in the AWS VPC environment that I'm running in, and I've heard of others using it successfully as well.

Issue Links

• duplicates: CASSANDRA-6110 Workaround for JMX random port selection