Re: Reminder: don't listen on public addresses

2017-01-20 Thread Richard L. Burton III
I'm often asked "How should I setup my security for Cassandra?" My answer is simple "Do not expose them to the outside world! If using AWS, setup your VPC and block any IP address that's not in your range and restrict what machines can access them." On Fri, Jan 20, 2017 at 12:29 PM, Jonathan

Reminder: don't listen on public addresses

2017-01-20 Thread Jonathan Ellis
MongoDB has been in the news for hackers deleting unsecured databases and demanding money to return the data. Now copycats are starting to look at other targets too like the thousands of unsecured Cassandra databases. Preventing this is very simple: don't allow Cassandra to listen on public