user3029642
user3029642

Reputation: 967

How to force Thrift to only accept connections from the localhost

I have a Java application that spins up multiple c++ processes. It communicates with these processes via Thrift RPC. For security purposes, I'd like to force the Thrift servers (c++ processes) to only accept connections from the localhost. I assumed it would be easy to bind the thrift socket to the loopback address, but after some googling I have not found an adequate solution. Am I missing something? Is there a way to bind thrift connections to an ip?

Thank you

Upvotes: 1

Views: 212

Answers (1)

JensG
JensG

Reputation: 13421

Not with builtin tools.

There is a concept of "processor events" implemented for certain language bindings. Not sure if they are for Java, but that could be worth a try.

Another apoproach would involve the creation of a customized TTransport implementation that checks the incoming connection.

Upvotes: 1

Related Questions