Hi matthias,
SOLR_HOST is not the same as SOLR_JETTY_HOST, see
https://solr.apache.org/guide/solr/latest/deployment-guide/taking-solr-to-production.html#security-considerations

Regards,
Alastair

On Mon, 2 Feb 2026 at 13:42, Matthias Apitz <[email protected]> wrote:

> Hello,
>
> This is with sorl-9.8.0. Whatever SOLR_HOST I do set in solr.in.sh, the
> LISTEN is always created on the 'localhost' interface. I have here some
> details of the problem:
>
> $ SOLR_INCLUDE=/usr/local/solr/bin/solr.in.sh
> /usr/local/solr-9.8.0/bin/solr start
> ...
> Starting Solr using the following settings:
>     JAVA               = /usr/local/sisis-pap/jdk/bin/java
>     SOLR_SERVER_DIR    = /usr/local/solr-9.8.0/server
>     SOLR_HOME          = /usr/local/solr-9.8.0/server/solr
>     SOLR_HOST          = 10.23.33.52
>     SOLR_PORT          = 8983
>     STOP_PORT          = 7983
>     JAVA_MEM_OPTS      = -Xms512m -Xmx512m
>     GC_TUNE            = -XX:+UseG1GC -XX:+PerfDisableSharedMem
> -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=250 -XX:+UseLargePages
> -XX:+AlwaysPreTouch -XX:+ExplicitGCInvokesConcurrent
>     GC_LOG_OPTS        =
> -Xlog:gc*:file=/usr/local/solr-9.8.0/server/logs/solr_gc.log:time,uptime:filecount=9,filesize=20M
>     SOLR_TIMEZONE      = UTC
>     SOLR_OPTS (SCRIPT) = -Xss256k -Dsolr.data.home=/data/OptLibSisis/solr
>     SOLR_DATA_HOME     = /data/OptLibSisis/solr
>
> Java 21 detected. Enabled workaround for SOLR-16463
> Java 21 detected. Incubating Panama Vector APIs have been enabled
> Waiting up to 180 seconds to see Solr running on port 8983 [|]
> Started Solr server on port 8983 (pid=554
> 546). Happy searching!
>
> strace shows that the SOLR_HOST value is used for "-Dhost=10.23.33.52"
> argument:
>
> 554   execve("/usr/local/sisis-pap/jdk/bin/java",
> ["/usr/local/sisis-pap/jdk/bin/jav"..., "-server", "-Xms512m", "-Xmx512m",
> "-XX:+UseG1GC", "-XX:+PerfDisableSharedMem", "-XX:+ParallelRefProcEnabled",
> "-XX:MaxGCPauseMillis=250", "-XX:+UseLargePages", "-XX:+AlwaysPreTouch",
> "-XX:+ExplicitGCInvokesConcurrent", "-Xlog:gc*:file=/usr/local/solr-9"...,
> "-Dsolr.jetty.inetaccess.includes"...,
> "-Dsolr.jetty.inetaccess.excludes"...,
> "-Dsolr.log.dir=/usr/local/solr-9"..., "-Djetty.port=8983",
> "-DSTOP.PORT=7983", "-DSTOP.KEY=solrrocks", "-Dhost=10.23.33.52",
> "-Duser.timezone=UTC", "-XX:-OmitStackTraceInFastThrow",
> "-XX:+CrashOnOutOfMemoryError", "-XX:ErrorFile=/usr/local/solr-9."...,
> "-Djetty.home=/usr/local/solr-9.8"...,
> "-Dsolr.solr.home=/usr/local/solr"...,
> "-Dsolr.install.dir=/usr/local/so"...,
> "-Dsolr.install.symDir=/usr/local"...,
> "-Dsolr.default.confdir=/usr/loca"..., "-Xss256k",
> "-Dsolr.data.home=/data/OptLibSis"...,
> "-XX:CompileCommand=exclude,com.g"..., "--add-modules", ...],
> 0x7ffc821fe500 /* 70 vars */) = 0
>
> The 'netstat' and 'lsof' shows where the LISTEN gets created:
>
> $ netstat -an | grep 8983
> tcp6       0      0 127.0.0.1:8983          :::*                    LISTEN
>
> $ lsof -p 554 | grep -i 8983
> java    554 sisis   1w      REG               0,33      2024   636017
> /usr/local/solr-9.8.0/server/logs/solr-8983-console.log
> java    554 sisis   2w      REG               0,33      2024   636017
> /usr/local/solr-9.8.0/server/logs/solr-8983-console.log
> java    554 sisis  48u     IPv6           11775223       0t0      TCP
> localhost:8983 (LISTEN)
>
> $ ifconfig -a
> eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
>         inet 10.23.33.52  netmask 255.255.255.0  broadcast 10.23.33.255
>         inet6 fe80::250:56ff:feb9:1fdb  prefixlen 64  scopeid 0x20<link>
>         ether 00:50:56:b9:1f:db  txqueuelen 1000  (Ethernet)
>         RX packets 834235  bytes 1496054250 (1.3 GiB)
>         RX errors 0  dropped 167  overruns 0  frame 0
>         TX packets 775608  bytes 217018090 (206.9 MiB)
>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>
> lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
>         inet 127.0.0.1  netmask 255.0.0.0
>         inet6 ::1  prefixlen 128  scopeid 0x10<host>
>         loop  txqueuelen 1000  (Lokale Schleife)
>         RX packets 36505930  bytes 3864535560 (3.5 GiB)
>         RX errors 0  dropped 0  overruns 0  frame 0
>         TX packets 36505930  bytes 3864535560 (3.5 GiB)
>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>
>
> Is this a known issue? Thanks
>
>         matthias
> --
> Matthias Apitz, ✉ [email protected], http://www.unixarea.de/
> +49-176-38902045
> Public GnuPG key: http://www.unixarea.de/key.pub
>
> Annalena Baerbock: "We are fighting a war against Russia ..." (25.1.2023)
>
> I, Matthias, I am not at war with Russia.
> Я не воюю с Россией.
> Ich bin nicht im Krieg mit Russland.
>

Reply via email to