[
https://issues.apache.org/jira/browse/KUDU-1900?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15885297#comment-15885297
]
Todd Lipcon commented on KUDU-1900:
-----------------------------------
It seems to me like it would be safe to consider all 127.0.0.0/8 connections to
be "local" and skip TLS. [~danburkert] any disagreement?
> Localhost connections to single-host clusters on Ubuntu don't skip TLS
> ----------------------------------------------------------------------
>
> Key: KUDU-1900
> URL: https://issues.apache.org/jira/browse/KUDU-1900
> Project: Kudu
> Issue Type: Bug
> Components: perf, security
> Reporter: Todd Lipcon
>
> On Ubuntu, it seems like we sometimes end up with connections from 127.0.1.1
> to 127.0.0.1 when running a local cluster and connecting to to it from the
> same machine. This is because Ubuntu puts an entry with the host's external
> hostname in /etc/hosts as 127.0.1.1, and the tablet server ends up
> registering with that name. The code that detects loopback connections sees
> the "127.0.0.1 -> 127.0.1.1" and decides it's not loopback.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
