citusdata / citusdata/citus_docs
Multi-node setup wrong pg_hba.conf entry
- Dominant language
- CSS
- Stars
- 58
- Forks
- 60
- PR merge metrics
- No merged PRs in 30d
Description
In the [page](https://docs.citusdata.com/en/latest/installation/production_deb.html) that we provide instructions on the multi machine cluster setup, we provide an entry for the pg_hba.conf file which is the following;
```
# Allow unrestricted access to nodes in the local network. The following ranges
# correspond to 24, 20, and 16-bit blocks in Private IPv4 address spaces.
host all all 10.0.0.0/8 trust
# Also allow the host unrestricted access to connect to itself
host all all 127.0.0.1/32 trust
host all all ::1/128 trust
```
When I use this exact setting in my aws cluster which are in the same security group and all the trafic is allowed, citus workers log that there is no entry for the incoming request in configuration files. Thus, the request is basically rejected by the workers. However, when I change the address ```10.0.0.0/8``` to ```all```, coordinator is able to connect to the workers. Of course, this is probably a very open networking setting and can cause a huge trouble.
On the other hand, I do not know about the networking much but I also assume that the people following our setup guides are generally like me. Thus, it might be better for us to provide a setting as pervious as possible.
Contributor guide
Assessment
This issue has not been assessed yet.