[jboss-jira] [JBoss JIRA] (WFLY-5790) Use a separate interface for JGroups sockets

[Brian Stansberry (JIRA)]

Brian Stansberry created WFLY-5790:
--------------------------------------

             Summary: Use a separate interface for JGroups sockets
                 Key: WFLY-5790
                 URL: https://issues.jboss.org/browse/WFLY-5790
             Project: WildFly
          Issue Type: Enhancement
          Components: Clustering, Domain Management
            Reporter: Brian Stansberry
            Assignee: Brian Stansberry
             Fix For: 10.0.0.Final


Our standard configs currently use the "public" interface for the JGroups sockets. However, best practice is to put intra-cluster traffic on a separate network from the network handling end user requests, both for possible performance reasons and to reduce the risk of exposing clustering to unwanted, possibly malevolent, traffic.

Since that is best practice, our standard configs should reflect that. So we'll create a new 'private' interface to go along with the existing 'public', 'management', and 'unsecure' ones, and use it for the JGroups sockets.

The default address will be ${jboss.bind.address.private:127.0.0.1} consistent with the others.

Users using our standard configs who wish to use -b startup switches to control the network address will need to add -bprivate=<theaddress> to the startup command. Simply using -b=<theaddress> will no longer affect the JGroups traffic if our standard configs are used.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)