docs/source/core/security-mongodb-configuration.txt at master · mongodb/docs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
.. _ip-binding:

======================================
IP Binding in Self-Managed Deployments
======================================

.. default-domain:: mongodb

.. meta::
   :keywords: on-prem
   :description: Configure IP binding for `mongod` and `mongos` to ensure secure access on trusted networks, using options like `net.bindIpAll` for broader address binding.

.. contents:: On this page
   :local:
   :backlinks: none
   :depth: 1
   :class: singlecol

Overview
--------

MongoDB binaries, :binary:`mongod` and :binary:`mongos`, bind to
localhost by default. If the :setting:`net.ipv6` configuration file
setting or the ``--ipv6`` command line option is set for the binary,
the binary additionally binds to the localhost IPv6 address.

Considerations
--------------

.. warning::

   Make sure that your :binary:`~bin.mongod` and :binary:`~bin.mongos`
   instances are only accessible on trusted networks. If your system
   has more than one network interface, bind MongoDB programs to the
   private or internal network interface.

If the :setting:`net.ipv6` configuration file setting or the ``--ipv6``
command line option is set for the binary, the binary additionally
binds to the localhost IPv6 address.

.. include:: /includes/fact-bind-to-all-ips.rst

.. seealso::

   - :ref:`security-firewalls`
   - :ref:`configuration-security`