citusdata / citusdata/citus_docs

Multi-node setup wrong pg_hba.conf entry

Open
#438 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
CSS
Stars
58
Forks
60
PR merge metrics
No merged PRs in 30d

Description

In the [page](https://docs.citusdata.com/en/latest/installation/production_deb.html) that we provide instructions on the multi machine cluster setup, we provide an entry for the pg_hba.conf file which is the following;
```
# Allow unrestricted access to nodes in the local network. The following ranges
# correspond to 24, 20, and 16-bit blocks in Private IPv4 address spaces.
host all all 10.0.0.0/8 trust

# Also allow the host unrestricted access to connect to itself
host all all 127.0.0.1/32 trust
host all all ::1/128 trust
```

When I use this exact setting in my aws cluster which are in the same security group and all the trafic is allowed, citus workers log that there is no entry for the incoming request in configuration files. Thus, the request is basically rejected by the workers. However, when I change the address ```10.0.0.0/8``` to ```all```, coordinator is able to connect to the workers. Of course, this is probably a very open networking setting and can cause a huge trouble.
On the other hand, I do not know about the networking much but I also assume that the people following our setup guides are generally like me. Thus, it might be better for us to provide a setting as pervious as possible.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.