summaryrefslogtreecommitdiffstats
path: root/node-repository/src/main/java
diff options
context:
space:
mode:
authorMartin Polden <mpolden@mpolden.no>2022-02-10 09:39:16 +0100
committerMartin Polden <mpolden@mpolden.no>2022-02-11 09:13:19 +0100
commit3c70f554d6385a628cd2f6f5193b417dffa36243 (patch)
tree1a17890c8b4a40946ef804e1132c9cc7dfe2ffd8 /node-repository/src/main/java
parentd7a92cc0fc9bca05b7a028cfa971183a4fddea8f (diff)
Stop trusting port 4080 on proxy nodes
Diffstat (limited to 'node-repository/src/main/java')
-rw-r--r--node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java3
1 files changed, 1 insertions, 2 deletions
diff --git a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java
index 88a62c94f43..ac24c83e129 100644
--- a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java
+++ b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java
@@ -109,10 +109,9 @@ public class NodeAcl {
case proxy:
// Proxy nodes trust:
// - config servers
- // - all connections from the world on 4080 (insecure tb removed), and 4443
+ // - all connections from the world on 443 (production traffic) and 4443 (health checks)
trustedNodes.addAll(allNodes.nodeType(NodeType.config).asList());
trustedPorts.add(443);
- trustedPorts.add(4080);
trustedPorts.add(4443);
break;