Cluster Security

By default, all users can perform any updates on the cluster, or upload arbitrary code to the cluster and perform remote code execution with distributed computing. To improve security, we recommend configuring user roles and enabling authorization on the cluster.

By default, nodes use plain-text communication that is vulnerable to malicious actions. Ignite 3 separates communications between cluster nodes and communication with clients.

Communication between nodes usually happens within the same data center. We recommend the following to improve the security of your cluster:

Client to server communication may be over internet or otherwise untrusted network. Only the client port (10800 by default) is typically exposed outside of the cluster. To securely interact with your clients: