Bind 8091 to localhost

Question

currently i have confluence running, but the synchrony port is not bound to localhost:

tcp6 0 0 127.0.0.1:8000 :::* LISTEN 56547/java
tcp6 0 0 127.0.0.1:8090 :::* LISTEN 56547/java
tcp6 0 0 :::8091 :::* LISTEN 57830/java

Yes, i can firewall this, however i want to make security properly implemented. however i cant find any documentation how to bind 8091 only to localhost. In the apache/nginx config its only explained for the 8090 port which you can see i have done.

Carsten Klein · Answer

Must be set as a CATALINA_OPTS JVM system property, see <confluence-root>/bin/setenv.(sh|bat).

The property is called synchrony.bind, see https://confluence.atlassian.com/doc/recognized-system-properties-190430.html

Bart_Vrancken · Answer

@Najjar _Innovura_ please read my post ... synchrony  is listening on the public IP and not localhost , this is my whole issue (out of the box) which i want to fix. I don't like having open services that are unnneeded.

Najjar _Innovura_ · Answer

Hi @Bart_Vrancken

When you install confluence with default settings it runs Confluence Tomcat server on port 8090. and users (client machines) access Confluence through 8090

And synchrony comes out of the box running on port 8091 and should not be opened publicly since users (client machine) communicate with Synchrony through Confluence Tomcat Server and confluence contacts synchrony internally.

So opening port 8091 will not do any impact unless you are hosting your Synchrony separately or using DataCenter