Alex Willmer
|
b9ceddd052
|
api: add --http-host to restrict RPC bind address
± ./build/ava --http-host localhost --public-ip <redacted>
___ ________ __ ___
/ _ \_/\ / _____/ ____ ____ | | ______ / _ \_/\
\/ \___/ / \ ____/ __ \_/ ___\| |/ / _ \ \/ \___/
\ \_\ \ ___/\ \___| < <_> )
\______ /\___ >\___ >__|_ \____/
\/ \/ \/ \/
...
INFO [05-14|21:09:54] /api/server.go#53: API server listening on
"localhost:9650"
INFO [05-14|21:09:54] /api/server.go#106: adding route
/ext/vm/jvYyfQTxGMJLuGWa55kdP2p2zSUYsQ5Raupu4TW34ZAUBAbtq
...
The node continues to partcipate in consensus, but RPC calls are
restricted to the localhost interface
$ ss -lnt | grep 965
LISTEN 0 4096 127.0.0.1:9650 0.0.0.0:*
LISTEN 0 10 0.0.0.0:9651 0.0.0.0:*
$ curl -X POST --data '{
> "id": '$(date +%s)',
> "jsonrpc": "2.0",
> "method": "admin.getNodeID",
> "params":{}
> }' -H 'content-type:application/json;' 127.0.0.1:9650/ext/admin
{"jsonrpc":"2.0","result":{"nodeID":"2iEwniZihec5S2anxDpKGenZB7Cs112Ap"},"id":1589486853}
$ curl -X POST --data '{
> "id": '$(date +%s)',
> "jsonrpc": "2.0",
> "method": "admin.getNodeID",
> "params":{}
> }' -H 'content-type:application/json;' 192.168.43.60:9650/ext/admin
curl: (7) Failed to connect to 192.168.43.60 port 9650: Connection
refused
|
2020-05-14 21:12:33 +01:00 |
StephenButtolph