Skip to content

Commit c52d625

Browse files
authored
[chore] Remove references to component.UseLocalHostAsDefaultHost (#11773)
<!--Ex. Fixing a bug - Describe the bug and how this fixes the issue. Ex. Adding a feature - Explain what this achieves.--> #### Description <!-- Issue number if applicable --> Follows #11235, relates to #8510
1 parent 33264a5 commit c52d625

File tree

2 files changed

+4
-7
lines changed

2 files changed

+4
-7
lines changed

docs/security-best-practices.md

+1-4
Original file line numberDiff line numberDiff line change
@@ -148,9 +148,6 @@ receivers:
148148
Generally, `localhost`-like addresses should be preferred over the 0.0.0.0 address.
149149
For more information, see [CWE-1327](https://cwe.mitre.org/data/definitions/1327.html).
150150

151-
To change the default endpoint to be `localhost`-bound in all components, enable the `component.UseLocalHostAsDefaultHost` feature gate. This feature gate will be enabled by default in the Collector in a future release.
152-
153-
154151
If `localhost` resolves to a different IP due to your DNS settings then explicitly use the loopback IP instead: `127.0.0.1` for IPv4 or `::1` for IPv6. In IPv6 setups, ensure your system supports both IPv4 and IPv6 loopback addresses to avoid issues.
155152

156153
Using `localhost` may not work in environments like Docker, Kubernetes, and other environments that have non-standard networking setups. We've documented a few working example setups for the OTLP receiver gRPC endpoint below, but other receivers and other Collector components may need similar configuration.
@@ -324,4 +321,4 @@ Extensions may also be used to run subprocesses. This can be useful when
324321
collection mechanisms that cannot natively be run by the Collector (e.g.
325322
FluentBit). Subprocesses expose a completely separate attack vector that would
326323
depend on the subprocess itself. In general, care should be taken before
327-
running any subprocesses alongside the Collector.
324+
running any subprocesses alongside the Collector.

receiver/otlpreceiver/README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -40,9 +40,9 @@ The following settings are configurable:
4040
4141
- `endpoint` (default = localhost:4317 for grpc protocol, localhost:4318 http protocol):
4242
host:port to which the receiver is going to receive data. The valid syntax is
43-
described at https://github.com/grpc/grpc/blob/master/doc/naming.md. The
44-
`component.UseLocalHostAsDefaultHost` feature gate changes these to localhost:4317 and
45-
localhost:4318 respectively. This will become the default in a future release.
43+
described at https://github.com/grpc/grpc/blob/master/doc/naming.md. See our
44+
[security best practices doc](https://opentelemetry.io/docs/security/config-best-practices/#protect-against-denial-of-service-attacks)
45+
to understand how to set the endpoint in different environments.
4646

4747
## Advanced Configuration
4848

0 commit comments

Comments
 (0)