Re: Proposal: Restrict watchdog and heartbeat receiver to listen only on configured addresses

Patch committed:

https://git.postgresql.org/gitweb/?p=pgpool2.git;a=commit;h=94b62a93c149bdaa7c546e387e479c287d3e10f9

________________________________________
差出人: Bo Peng <pengbo(at)sraoss(dot)co(dot)jp>
送信: 2025 年 8 月 18 日 (月曜日) 9:30
宛先: pgpool-hackers(at)lists(dot)postgresql(dot)org <pgpool-hackers(at)lists(dot)postgresql(dot)org>
件名: Proposal: Restrict watchdog and heartbeat receiver to listen only on configured addresses

Currently, both the watchdog and heartbeat receiver processes listen on all interfaces.

    tcp         0      0 0.0.0.0:9000            0.0.0.0:*               LISTEN      1428/pgpool: watchd
    udp        0      0 0.0.0.0:9694            0.0.0.0:*                                1453/pgpool: heartb
    udp        0      0 0.0.0.0:9694            0.0.0.0:*                                1444/pgpool: heartb

For security reasons, I propose to change this behavior so that they listen only on the addresses
specified by hostname and heartbeat_hostname.

    tcp         0      0 192.168.101.101:9000      0.0.0.0:*               LISTEN      727648/pgpool: watc
    udp        0      0 192.168.101.101:9694      0.0.0.0:*                                727664/pgpool: hear
    udp        0      0 192.168.101.101:9694      0.0.0.0:*                                727660/pgpool: hear

Patch is attached.
---
Bo Peng <pengbo(at)sraoss(dot)co(dot)jp>
SRA OSS K.K.
TEL: 03-5979-2701 FAX: 03-5979-2702
Mobile: 080-7752-0749
URL: https://www.sraoss.co.jp/