Running Solr in read-only mode

I think I missed something obvious here. I have to imagine that many people open their Solr servers to other developers and do not want them to be able to change the index.

Is there something in the solrconfig.xml file that can be customized to make the index read-only?

Update to clarify: My goal is to use Solr with an existing Lucene index managed by another application. This works fine, but I want to make sure Solr never tries to write this index.

+5
source share
2 answers

Providing a Solr instance for the public Internet is a bad idea. Although you can disable some components to make it read-only, it just wasn’t designed with security in mind, it was intended to be used as an internal service, just as you wouldn’t open an RDBMS.

From the Solr wiki page :

, Solr . , , Solr, , Solr - . / Solr , (, , /), Solr .

ajax-solr, Solr javascript, , Solr .

, , guardian.co.uk: , Solr , API, . , define , , .

script kiddie DoS Solr , , .

+6

, , solr.XmlUpdateRequestHandler solrconfig.xml.

- . , ( XmlUpdateRequestHandler ). , .

UPDATE

, Solr 1.4 . /update requestHandler, .

+2

All Articles