[SOLR-13442] Lean Solr with minimal functionality

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Ishan Chattopadhyaya
• Reporter: Ishan Chattopadhyaya
• Created: 02/May/19 20:36
• Updated: 04/Feb/21 16:37

Description

With lots and lots of out of the box features come the possibility of security vulnerabilities. A managed / hosted Solr cluster should have only minimal functionality turned on.

Through this issue, we'd like to explore the possibility of starting up Solr such that just basic cloud based indexing and querying works (under basic auth), and fancy stuff like the following be turned off (maybe by a startup parameter):

1. Tika
2. DIH
3. Funky shards parameter usage (unless specific to implicit routing)
4. HDFS
5. Streaming expressions
6. non whitelisted function queries (with a whitelist of only few that are essential)
7. configset upload
8. blob store
9. etc.

The motivation of this work is to have a public facing minimal Solr that is bullet proof, secure against external exposure (with the help of basic auth and rule based authorization).

Issue Links

• is a parent of: SOLR-14616 Remove CDCR from 9.0
• is a parent of: SOLR-14621 Deprecate and eventually remove HDFS support
• is a parent of: SOLR-13973 Deprecate Tika
• is a parent of: SOLR-14070 Deprecate CloudSolrClient's ZKHost constructor
• is a parent of: SOLR-13978 Remove bloat from default configset
• is a parent of: SOLR-14022 Deprecate CDCR from Solr in 8.x
• is a parent of: SOLR-14066 Deprecate DIH and migrate to a community supported package
• is a parent of: SOLR-14071 Untrusted configsets shouldn't be allowed to use <lib> directive
• is a parent of: SOLR-14656 Deprecate current autoscaling framework, remove from master
• is a parent of: SOLR-15121 Move XSLT (tr param) to scripting contrib
• is a parent of: SOLR-14021 Deprecate HDFS support from 8x
• is a parent of: SOLR-14065 Deprecate Velocity
• is a parent of: SOLR-14067 Move StatelessScriptUpdateProcessor to a contrib
• is a parent of: SOLR-14072 Deprecate plugin loading using runtimelib
• is a parent of: SOLR-14783 Remove DIH from 9.0
• relates to: SOLR-6806 Reduce the size of the main Solr binary download