diff options
author | Martin Polden <mpolden@mpolden.no> | 2022-02-10 09:39:16 +0100 |
---|---|---|
committer | Martin Polden <mpolden@mpolden.no> | 2022-02-11 09:13:19 +0100 |
commit | 3c70f554d6385a628cd2f6f5193b417dffa36243 (patch) | |
tree | 1a17890c8b4a40946ef804e1132c9cc7dfe2ffd8 /node-repository/src/main/java | |
parent | d7a92cc0fc9bca05b7a028cfa971183a4fddea8f (diff) |
Stop trusting port 4080 on proxy nodes
Diffstat (limited to 'node-repository/src/main/java')
-rw-r--r-- | node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java index 88a62c94f43..ac24c83e129 100644 --- a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java +++ b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/node/NodeAcl.java @@ -109,10 +109,9 @@ public class NodeAcl { case proxy: // Proxy nodes trust: // - config servers - // - all connections from the world on 4080 (insecure tb removed), and 4443 + // - all connections from the world on 443 (production traffic) and 4443 (health checks) trustedNodes.addAll(allNodes.nodeType(NodeType.config).asList()); trustedPorts.add(443); - trustedPorts.add(4080); trustedPorts.add(4443); break; |