3 ms·
Please note that private networking on DigitalOcean doesn't limit this network interface to your own instances. All other customers on the same datacenter can c
by dividuum 12y ago
Please note that private networking on DigitalOcean doesn't limit this network interface to your own instances. All other customers on the same datacenter can connect to services exposed there. I don't have any experience with RethinkDB, so I might be wrong here, but you probably opened up your cluster to all other customers.
- neumino 12y agoThanks, I didn't pay enough attention to that. A simple fix is to run some `iptable` commands in the discovery service and allow only the servers listed in `announce/services` to connect.
- opendais 12y agoMitM. Be sure to at least do it via SSL or stunnel or something.
- toomuchtodo 12y agoAlso have your client verify the SSL fingerprint if possible.