@@ -221,19 +221,19 @@ exposure to untrusted networks**.
221221
222222Default settings include:
223223
224- * ` admin.enableServer=false `
225- * ` admin.serverAddress=0.0.0.0 `
226- * ` admin.serverPort=8080 `
227- * ` admin.forceHttps=false `
228- * ` admin.needClientAuth=false `
224+ - ` admin.enableServer=false `
225+ - ` admin.serverAddress=0.0.0.0 `
226+ - ` admin.serverPort=8080 `
227+ - ` admin.forceHttps=false `
228+ - ` admin.needClientAuth=false `
229229
230230With these defaults:
231231
232- * All traffic is transmitted in clear text over HTTP.
233- * Administrative data, including configuration and runtime details, can be viewed by anyone with network access.
234- * Many commands (such as ` stat ` , ` srvr ` , ` conf ` , and ` cons ` ) do not require authentication.
235- * Sensitive operational information may be disclosed.
236- * In some environments, unrestricted administrative access can increase the impact of vulnerabilities or misconfiguration.
232+ - All traffic is transmitted in clear text over HTTP.
233+ - Administrative data, including configuration and runtime details, can be viewed by anyone with network access.
234+ - Many commands (such as ` stat ` , ` srvr ` , ` conf ` , and ` cons ` ) do not require authentication.
235+ - Sensitive operational information may be disclosed.
236+ - In some environments, unrestricted administrative access can increase the impact of vulnerabilities or misconfiguration.
237237
238238### Recommended Deployment Practices
239239
@@ -245,13 +245,14 @@ Limit access to the AdminServer port to trusted hosts or management networks onl
245245
246246Examples:
247247
248- * Bind the server to localhost:
248+ - Bind the server to localhost:
249249
250250 ``` properties
251251 admin.serverAddress =127.0.0.1
252252 ```
253- * Use host-based firewall rules (such as ` iptables ` , ` firewalld ` , or cloud security groups) to allow access only from
254- * administrative systems.
253+
254+ - Use host-based firewall rules (such as ` iptables ` , ` firewalld ` , or cloud security groups) to allow access only from
255+ - administrative systems.
255256
256257This is the minimum recommended protection when HTTPS and client authentication are not enabled.
257258
@@ -300,10 +301,10 @@ admin.enableServer=false
300301
301302Exposing the AdminServer to untrusted networks with the default configuration may allow unauthorized users to:
302303
303- * Retrieve server configuration and runtime information
304- * Inspect connected clients and sessions
305- * Reset statistics
306- * Execute other administrative commands
304+ - Retrieve server configuration and runtime information
305+ - Inspect connected clients and sessions
306+ - Reset statistics
307+ - Execute other administrative commands
307308
308309Always protect the AdminServer with ** network-level controls** and, preferably, ** HTTPS with client certificate authentication** .
309310
0 commit comments