gitlab-com-seaweedfs/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2024-01-19 02:48:24 +00:00
Code Issues Projects Releases Wiki Activity

Updated Security Overview (markdown)

Chris Lu 2019-03-21 16:04:39 -07:00
parent 2ce4225c0f
commit 079c0a5eae
1 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
Security-Overview.md

@ -13,12 +13,10 @@ Server | Service | Note
master | gRPC | secured by mutual TLS
volume | gRPC | secured by mutual TLS
filer | gRPC | secured by mutual TLS
master | http REST write | "weed master -httpReadOnly", disable http operations, only gRPC operations are allowed.
master | http REST read | unprotected, exposing the UI, and stats
filer | http REST write | "weed master -port.public", add port for read only
filer | http REST read | unprotected
master | http REST | "weed master -disableHttp", disable http operations, only gRPC operations are allowed.
filer | http REST | "weed filer -disableHttp", disable http operations, only gRPC operations are allowed.
volume | http REST write | set `jwt.signing.key` in `security.toml` in master and volume servers to check token for write operations
volume | http REST read | unprotected
volume | http REST read | unprotected, but url is not guessable
# Generate `security.toml` file