The Question Recently, a customer asked us:
We were wondering if the Connectors would be able to bind to
localhost/127.0.0.1 instead of
0.0.0.0:3306? Since the Connector is installed on
the application servers, all of the connections are coming from
localhost. We would like to limit this exposure so
that the 3306 port is not exposed externally. We ask
because we are failing PCI checks that are able to access the
database port externally.
The Answer YES!
You may set the IP address for the Connector to listen on by
using the tpm command option:
property=server.listen.address={IP_ADDRESS}
To force the Connector to listen on the localhost only use the following example:
shell> tools/tpm configure alpha --property=server.listen.address=127.0.0.1 shell> tools/tpm update --replace-release
Use the IP …
[Read more]