search

sofastack / sofa-ark

SOFAArk is a light-weight，java based classloader isolation framework.
https://www.sofastack.tech/projects/sofa-boot/sofa-ark-readme/
Apache License 2.0
1.56k stars 497 forks source link

Telnet默认监听1234端口安全性问题 #837

Closed TeddyLav closed 6 months ago

TeddyLav commented 7 months ago

Telnet默认监听1234端口，其他IP的客户端可以随意访问，请问如何提高安全性，比如只监听localhost？

lvjing2 commented 7 months ago

在线上环境可以关闭的

TeddyLav commented 7 months ago

请问具体怎么关闭呢？修改配置文件吗？

lvjing2 commented 7 months ago

可以通过这个参数配置 com.alipay.sofa.ark.spi.constant.Constants#TELNET_SERVER_ENABLE

TeddyLav commented 7 months ago

conf/ark/bootstrap.properties或者spring工程resources/application.properties配置文件中加入参数不生效，内容如下： com.alipay.sofa.ark.spi.constant.Constants.TELNET_SERVER_ENABLE=false

lvjing2 commented 7 months ago

方便的化，可以麻烦 debug 看下原因，可能哪里配置有问题。这个能力我们一直在使用的，是可以再某些环境关闭 telnet 的。 image

github-actions[bot] commented 6 months ago

This issue has been automatically marked as stale because it has not had recent activity in the last 30 days. It will be closed in the next 7 days unless it is tagged (pinned, good first issue or help wanted) or other activity occurs. Thank you for your contributions.

github-actions[bot] commented 6 months ago

This issue has been automatically closed because it has not had activity in the last 37 days. If this issue is still valid, please ping a maintainer and ask them to label it as pinned, good first issue or help wanted. Thank you for your contributions.

lujg commented 6 months ago

conf/ark/bootstrap.properties或者spring工程resources/application.properties配置文件中加入参数不生效，内容如下： com.alipay.sofa.ark.spi.constant.Constants.TELNET_SERVER_ENABLE=false

key 不对吧，应该使用代码中实际的 string 值 sofa.ark.telnet.server.enable