Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[docs][chore] warning for using localhost in security-best-practices #9444

Merged
merged 7 commits into from
Mar 6, 2024
Merged

[docs][chore] warning for using localhost in security-best-practices #9444

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
141fedd
warning for using localhost in security-best-practices
Sanket-0510 Jan 31, 2024
cb6af59
resolved the requested changes
Sanket-0510 Jan 31, 2024
d805edf
Merge branch 'main' into warning-regarding-localhost
Sanket-0510 Jan 31, 2024
43550a8
its just an edge case
Sanket-0510 Feb 18, 2024
cc03969
Merge branch 'main' into warning-regarding-localhost
Sanket-0510 Feb 18, 2024
b118308
Merge branch 'main' into warning-regarding-localhost
Sanket-0510 Feb 20, 2024
5fac17a
Update docs/security-best-practices.md
Sanket-0510 Mar 6, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion docs/security-best-practices.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,6 +150,9 @@ For more information, see [CWE-1327](https://cwe.mitre.org/data/definitions/1327

To change the default endpoint to be `localhost`-bound in all components, enable the `component.UseLocalHostAsDefaultHost` feature gate. This feature gate will be enabled by default in the Collector in a future release.


If `localhost` resolves to a different IP due to your DNS settings then explicitly use the loopback IP instead: `127.0.0.1` for IPv4 or `::1` for IPv6. In IPv6 setups, ensure your system supports both IPv4 and IPv6 loopback addresses to avoid issues.

## Processors

Processors sit between receivers and exporters. They are responsible for
Expand Down Expand Up @@ -218,4 +221,4 @@ Extensions may also be used to run subprocesses. This can be useful when
collection mechanisms that cannot natively be run by the Collector (e.g.
FluentBit). Subprocesses expose a completely separate attack vector that would
depend on the subprocess itself. In general, care should be taken before
running any subprocesses alongside the Collector.
running any subprocesses alongside the Collector.
Loading