Couchbase Server

Doc Request: Best practices for hardening and security of Couchbase

Details

  • Type: Improvement Improvement
  • Status: Open Open
  • Priority: Major Major
  • Resolution: Unresolved
  • Affects Version/s: 2.0
  • Fix Version/s: None
  • Component/s: documentation
  • Security Level: Public
  • Labels:
    None

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Perry Krug added a comment -
Something to reference at least: http://blog.couchbase.com/memcached-security

Discussion needed on firewalls, system-level security, links to XDCR, passwords (both UI and SASL), encryption, etc.

I've got thoughts and descriptions in my head, need someone to help format and writeup.
Show
Perry Krug added a comment - Something to reference at least: http://blog.couchbase.com/memcached-security Discussion needed on firewalls, system-level security, links to XDCR, passwords (both UI and SASL), encryption, etc. I've got thoughts and descriptions in my head, need someone to help format and writeup.
Hide
Permalink
MC Brown added a comment -
Type up your notes, even in outline form, for you want, and we'll get the information expanded and added into the docs.
Show
MC Brown added a comment - Type up your notes, even in outline form, for you want, and we'll get the information expanded and added into the docs.
Hide
Permalink
Perry Krug added a comment -
Hardening Couchbase in production - Couchbase is not meant to be on the open-internet, etc
   What security does Couchbase provide out of the box? (admin pass, sasl)
       -SASL - where does the password get stored and where does it get configured (client/server)
       -Admin pass is cleartext, no user roles yet
    What kind of external security can be applied?
        -Root password best practices
        -firewalls
        -data encryption
        -network encryption (internal replication and XDCR)
    Currently known vulnerabilities
Show
Perry Krug added a comment - Hardening Couchbase in production - Couchbase is not meant to be on the open-internet, etc    What security does Couchbase provide out of the box? (admin pass, sasl)        -SASL - where does the password get stored and where does it get configured (client/server)        -Admin pass is cleartext, no user roles yet     What kind of external security can be applied?         -Root password best practices         -firewalls         -data encryption         -network encryption (internal replication and XDCR)     Currently known vulnerabilities

People

  • Assignee:
    Karen Zeller
    Reporter:
    Perry Krug
Vote (0)
Watch (2)

Dates

  • Created:
    Updated: