[FLINK-24474] Standalone clusters should bind to localhost by default - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.15.0
Component/s: Runtime / Configuration
Labels:
- pull-request-available

Release Note:

Hide
For security purposes standalone clusters now bind the REST API and RPC endpoints to localhost by default. The goal is to prevent cases where users unknowingly exposed the cluster to the outside, as they would previously bind to all interfaces.

This can be reverted by removing the 'rest.bind-address'/'[jobmanager|taskmanager].bind-host' settings from the flink-conf.yaml .

Note that within docker containers the REST API still binds to 0.0.0.0 .

Show
For security purposes standalone clusters now bind the REST API and RPC endpoints to localhost by default. The goal is to prevent cases where users unknowingly exposed the cluster to the outside, as they would previously bind to all interfaces. This can be reverted by removing the 'rest.bind-address'/'[jobmanager|taskmanager].bind-host' settings from the flink-conf.yaml . Note that within docker containers the REST API still binds to 0.0.0.0 .

Description

By default the REST endpoints bind to 0.0.0.0.

This is fine for docker use-cases as it simplifies the setup and the API isn't reachable unless the user explicitly enables that via docker.

However, for standalone clusters this is a different story, and it is currently too easy for users to accidentally expose their clusters to the outside world.

We should set the bind address by default to localhost, and change the docker-scripts to set this to 0.0.0.0 .