我在1000多台线上服务器部署了python脚本,各自运算并把数值存入其他三台服务器上的mongo副本集。
现在直接写很不安全,账号密码数据库ip都直接暴露给线上。
有什么方案能解决这个问题吗?
漂亮男人2017-05-02 09:26:16
The problem has been solved.
Because the amount of data is relatively large, a layer of kafka is added in the middle
给我你的怀抱2017-05-02 09:26:16
1. Network access control:
1. Ensure that mongodb is placed in a safe and reliable network; the online server can be configured with dual network cards, 1 network card accesses the external network, and 1 network card accesses the mongodb internal network
2. The mongodb server can configure the firewall iptables and only open necessary services
3. Modify the default listening port
4. enable ssl
2. Account and password
Use the enterprise version of Kerberos authentication to avoid direct exposure of account and password
3. Supplement
Depending on how important your data is. If it is sensitive data, it is recommended to consider MongoDB Enterprise Edition, which has more comprehensive security features.
In addition, you can refer to a relatively large mongodb data leakage event that occurred this year:
http://www.internet-security....