It appears that my rabbitmq listens on all interfaces despite:
In /etc/rabbitmq/rabbitmq.config:
[{rabbit, [{tcp_listeners, [{"10.0.0.1", 5672}]}]},
{rabbitmq_mochiweb, [{listeners, [{mgmt, [{ip, "10.0.0.1"},
{port, 55672}]}]}]}].
In /etc/rabbitmq/rabbitmq-env.conf:
export RABBITMQ_NODENAME=rabbit
export RABBITMQ_NODE_IP_ADDRESS=10.0.0.1
export ERL_EPMD_ADDRESS=10.0.0.1
When i run netstat -uptan | grep beam i get:
tcp 0 0 10.0.0.1:5672 0.0.0.0:* LISTEN 1378/beam
tcp 0 0 0.0.0.0:33551 0.0.0.0:* LISTEN 1378/beam
tcp 0 0 127.0.0.1:38737 127.0.0.1:4369 ESTABLISHED 1378/beam
How do i make beam not listening on 0.0.0.0:33551 ?
tcp 0 0 127.0.0.1:38737 127.0.0.1:4369 ESTABLISHED 1378/beam
says that beam process enables Erlang distributed protocol and connected to epmd daemon on127.0.0.1:4369
. Also beam process waits for incoming connections on0.0.0.0:33551
. This interface secured with Erlang cookies andrabbitmqctl
uses it to connect to RabbitMQ instance and manage it.To make it able to accept connections only from localhost you can:
use
-kernel inet_dist_use_interface '{127,0,0,1}'
kernel configuration flag from shell or create my_rabbitmq.conf:[{kernel,[{inet_dist_use_interface,{127,0,0,1}}]}].
and use RabbitMQ environment variable to include it:
export RABBITMQ_CONFIG_FILE="/path/to/my_rabbitmq.conf"
to use configuration fileput in your
/etc/rabbitmq/rabbitmq.conf
export ERL_EPMD_ADDRESS=127.0.0.1
Erlang environment variable