Brian Stansberry created WFLY-5790:
--------------------------------------
Summary: Use a separate interface for JGroups sockets
Key: WFLY-5790
URL:
https://issues.jboss.org/browse/WFLY-5790
Project: WildFly
Issue Type: Enhancement
Components: Clustering, Domain Management
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Fix For: 10.0.0.Final
Our standard configs currently use the "public" interface for the JGroups
sockets. However, best practice is to put intra-cluster traffic on a separate network from
the network handling end user requests, both for possible performance reasons and to
reduce the risk of exposing clustering to unwanted, possibly malevolent, traffic.
Since that is best practice, our standard configs should reflect that. So we'll create
a new 'private' interface to go along with the existing 'public',
'management', and 'unsecure' ones, and use it for the JGroups sockets.
The default address will be ${jboss.bind.address.private:127.0.0.1} consistent with the
others.
Users using our standard configs who wish to use -b startup switches to control the
network address will need to add -bprivate=<theaddress> to the startup command.
Simply using -b=<theaddress> will no longer affect the JGroups traffic if our
standard configs are used.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)