access control for rethink database

dc.901 · 03-15-2024, 11:41 AM

Hello all,
I am looking for a way to secure rethinkdb deployment and want to allow connection from only specific app servers; for example,

Code:

Rethink Dev DB only accepts connection from Dev app servers
Rethink Prod DB only accepts connection from Prod app servers

Rethink Dev and Prod are 2 different hosts.
Is this possible?
Looking at this doc: https://rethinkdb.com/docs/security/
But not seeing specific to what I am trying to do above
---
Note - I did post this question on RethinkDB-help Slack channel; which appears to be dead, despite being couple of thousand members.
Apologies for double posting - only posted here because there is no response on their slack

lvm_ · 03-15-2024, 12:07 PM

No idea what rethinkdb is but I presume it accepts connection on a specific port, and you can restrict who can connect to this port using iptables

Code:

iptables -A INPUT -p tcp --dport <port> -s <allowed-address> -j ACCEPT
iptables -A INPUT -p tcp --dport <port> -j DROP

dc.901 · 03-15-2024, 12:27 PM

Quote:

Originally Posted by lvm_

No idea what rethinkdb is but I presume it accepts connection on a specific port, and you can restrict who can connect to this port using iptables

Code:

iptables -A INPUT -p tcp --dport <port> -s <allowed-address> -j ACCEPT
iptables -A INPUT -p tcp --dport <port> -j DROP

Aagh - I was banging my head at this for bit and honestly did NOT think of this.
I did think of firewalld and restricting IPs.
Let me give this a try.
Thank you!!