Reputation: 1368
Because xdcr is used over the internet, it is totally possible to perform ddos attacks on those xdcr ports?
Should I do something about it? What should I do?
Upvotes: 2
Views: 187
Reputation: 9640
XDCR ports only need to be open to the other cluster nodes; so if you did use XDCR over the open internet you would typically firewall those ports to only be accessible to the remote cluster.
(Note: You would likely want to use encryption of your data if you are doing XDCR over the internet, either using XDCR-with-SSL in Couchbase 2.5 or otherwise with a VPN tunnel / private WAN.
Upvotes: 1