search

Home  >  Q&A  >  body text

What are the intermediate solutions between online scripts and mongodb?

I deployed python scripts on more than 1,000 online servers, calculated each and stored the values ​​​​in the mongo replica set on the other three servers.
It is very unsafe to write directly now. The account, password and database IP are directly exposed online.
Is there any solution to this problem?

阿神阿神2844 days ago686

reply all(2)I'll reply

  • 漂亮男人

    漂亮男人2017-05-02 09:26:16

    The problem has been solved.
    Because the amount of data is relatively large, a layer of kafka is added in the middle

    reply
    0
  • 给我你的怀抱

    给我你的怀抱2017-05-02 09:26:16

    1. Network access control:

    1. Ensure that mongodb is placed in a safe and reliable network; the online server can be configured with dual network cards, 1 network card accesses the external network, and 1 network card accesses the mongodb internal network

    2. The mongodb server can configure the firewall iptables and only open necessary services

    3. Modify the default listening port

    4. enable ssl

    2. Account and password

    Use the enterprise version of Kerberos authentication to avoid direct exposure of account and password

    3. Supplement

    Depending on how important your data is. If it is sensitive data, it is recommended to consider MongoDB Enterprise Edition, which has more comprehensive security features.

    In addition, you can refer to a relatively large mongodb data leakage event that occurred this year:

    http://www.internet-security....

    reply
    0
  • Cancelreply