Skip to content

Commit 925fe49

Browse files
committed
ZOOKEEPER-5050. npx prettier -w
1 parent ae61932 commit 925fe49

1 file changed

Lines changed: 18 additions & 17 deletions

File tree

  • zookeeper-website/app/pages/_docs/docs/_mdx/admin-ops/administrators-guide

zookeeper-website/app/pages/_docs/docs/_mdx/admin-ops/administrators-guide/commands.mdx

Lines changed: 18 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -221,19 +221,19 @@ exposure to untrusted networks**.
221221

222222
Default settings include:
223223

224-
* `admin.enableServer=false`
225-
* `admin.serverAddress=0.0.0.0`
226-
* `admin.serverPort=8080`
227-
* `admin.forceHttps=false`
228-
* `admin.needClientAuth=false`
224+
- `admin.enableServer=false`
225+
- `admin.serverAddress=0.0.0.0`
226+
- `admin.serverPort=8080`
227+
- `admin.forceHttps=false`
228+
- `admin.needClientAuth=false`
229229

230230
With these defaults:
231231

232-
* All traffic is transmitted in clear text over HTTP.
233-
* Administrative data, including configuration and runtime details, can be viewed by anyone with network access.
234-
* Many commands (such as `stat`, `srvr`, `conf`, and `cons`) do not require authentication.
235-
* Sensitive operational information may be disclosed.
236-
* In some environments, unrestricted administrative access can increase the impact of vulnerabilities or misconfiguration.
232+
- All traffic is transmitted in clear text over HTTP.
233+
- Administrative data, including configuration and runtime details, can be viewed by anyone with network access.
234+
- Many commands (such as `stat`, `srvr`, `conf`, and `cons`) do not require authentication.
235+
- Sensitive operational information may be disclosed.
236+
- In some environments, unrestricted administrative access can increase the impact of vulnerabilities or misconfiguration.
237237

238238
### Recommended Deployment Practices
239239

@@ -245,13 +245,14 @@ Limit access to the AdminServer port to trusted hosts or management networks onl
245245

246246
Examples:
247247

248-
* Bind the server to localhost:
248+
- Bind the server to localhost:
249249

250250
```properties
251251
admin.serverAddress=127.0.0.1
252252
```
253-
* Use host-based firewall rules (such as `iptables`, `firewalld`, or cloud security groups) to allow access only from
254-
* administrative systems.
253+
254+
- Use host-based firewall rules (such as `iptables`, `firewalld`, or cloud security groups) to allow access only from
255+
- administrative systems.
255256

256257
This is the minimum recommended protection when HTTPS and client authentication are not enabled.
257258

@@ -300,10 +301,10 @@ admin.enableServer=false
300301

301302
Exposing the AdminServer to untrusted networks with the default configuration may allow unauthorized users to:
302303

303-
* Retrieve server configuration and runtime information
304-
* Inspect connected clients and sessions
305-
* Reset statistics
306-
* Execute other administrative commands
304+
- Retrieve server configuration and runtime information
305+
- Inspect connected clients and sessions
306+
- Reset statistics
307+
- Execute other administrative commands
307308

308309
Always protect the AdminServer with **network-level controls** and, preferably, **HTTPS with client certificate authentication**.
309310

0 commit comments

Comments
 (0)