Return-Path: X-Original-To: apmail-lucene-solr-user-archive@minotaur.apache.org Delivered-To: apmail-lucene-solr-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 030A117DEE for ; Thu, 26 Mar 2015 21:39:19 +0000 (UTC) Received: (qmail 12893 invoked by uid 500); 26 Mar 2015 21:39:14 -0000 Delivered-To: apmail-lucene-solr-user-archive@lucene.apache.org Received: (qmail 12821 invoked by uid 500); 26 Mar 2015 21:39:14 -0000 Mailing-List: contact solr-user-help@lucene.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: solr-user@lucene.apache.org Delivered-To: mailing list solr-user@lucene.apache.org Received: (qmail 12809 invoked by uid 99); 26 Mar 2015 21:39:14 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Mar 2015 21:39:14 +0000 X-ASF-Spam-Status: No, hits=3.2 required=5.0 tests=FORGED_YAHOO_RCVD,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of odedsofer@yahoo.com designates 98.139.212.175 as permitted sender) Received: from [98.139.212.175] (HELO nm16.bullet.mail.bf1.yahoo.com) (98.139.212.175) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Mar 2015 21:38:47 +0000 Received: from [98.139.170.179] by nm16.bullet.mail.bf1.yahoo.com with NNFMP; 26 Mar 2015 21:38:44 -0000 Received: from [98.139.212.196] by tm22.bullet.mail.bf1.yahoo.com with NNFMP; 26 Mar 2015 21:38:44 -0000 Received: from [127.0.0.1] by omp1005.mail.bf1.yahoo.com with NNFMP; 26 Mar 2015 21:38:44 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 650526.80904.bm@omp1005.mail.bf1.yahoo.com X-YMail-OSG: LzCzCmUVM1lPk6AIfLsMYzifj_0msWfhq_L1tHrV3FNMrhPOrU8H1P3LnZ8b4Y3 ardbyGBWGqmOpnzG2q78MYMoOCLz5cx0MQ9AfFZnlwZfc2CKKwhcarOMm6_fZ6Cc9TiaaA0GzSNd CWbPxECmliJ33GiNoKwXFdc3JCYZ0cIZla2i43a_XCnhTsdeEkLDeli3fUCNoyweRFTknfCZONYV dsCRUjtld.6jdXPyjlnFQA__xuJvSZaIsg5tBzYPeYBBZlMXcmGSviZZ3Kcb_93YgZPpki.XxnUW QDOz8wq5xvEFIKuNFkDOHSM16D4X2p773lL_3U_jQW5mxcz4H_ii_7Oek6H45.E1wsvF_lqlCnA5 Qd8l7r0LkFLNdlqBnm9Fe5qpbyIVfYdZraKhx8K3dFGr54TfvGOBM77OF.rzPf5z_8aPPl6QUmng VnvXFk70rzPq._W.zdHbWVXS4H59qaTxhykh44wfaoYxWetN0ahh76EdvG7W9CnBAB3O.e8riFwI FUEqyI.GfEEed Received: by 76.13.26.110; Thu, 26 Mar 2015 21:38:44 +0000 Date: Thu, 26 Mar 2015 21:38:43 +0000 (UTC) From: Oded Sofer Reply-To: Oded Sofer To: "solr-user@lucene.apache.org" Message-ID: <1821473239.2976055.1427405923639.JavaMail.yahoo@mail.yahoo.com> Subject: SolrCloud -- Blocking access to administration commands while keeping the solr internal communication MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_2976054_1395537903.1427405923637" X-Virus-Checked: Checked by ClamAV on apache.org ------=_Part_2976054_1395537903.1427405923637 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Hello there, There are many blogs discussing this issue but it is hard to find if someone had managed to resolve that. We have many nodes in the SolrCloud, implementing the iptable restriction will fill the iptable with many rules that will affect performance. We are using 4.3.10, on Tomcat 5. ------=_Part_2976054_1395537903.1427405923637--