coder-zzzz opened a new issue #1842: nameserver without acl will be dangerous
URL: https://github.com/apache/rocketmq/issues/1842
 
 
   **FEATURE REQUEST**
   
   1. Please describe the feature you are requesting.
    nameserver add acl 
   
   2. Provide any additional detail on your proposed use case for this feature.
   
    because the nameserver ip and port is public to all users, Or it can be 
scan by some tools. If someone get the ip and port, he can use the command 
clusterList to find out brokerName, Then use wipeWritePerm command can forbit 
writes to this cluster.
    
   2. Indicate the importance of this issue to you (blocker, must-have, 
should-have, nice-to-have). Are you currently using any workarounds to address 
this issue?
   one workaround is to use iptables on the nameserver machine. Or if it can 
use the acl to limit some ip or calculate the ak,sk to judge if it is legal?
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to