question How do I restrict access to Ambari WebUI by IP address? in Archives of Support Questions (Read Only)

How do I restrict access to Ambari WebUI by IP address?

toide — Wed, 17 Oct 2018 08:42:46 GMT

How do I restrict access to Ambari WebUI by IP address?

Of course, using a firewall included in OS is a solution, but I'd like to know the way which requires only to modify Ambari's configurations.

I know Ambari uses Jetty for HTTP server and Jetty provides IP address restriction by IPAccessHandler https://www.eclipse.org/jetty/documentation/9.4.x/ipaccess-handler.html, but I'm not sure how to apply this to Ambari.

Re: How do I restrict access to Ambari WebUI by IP address?

jsensharma — Wed, 17 Oct 2018 09:23:01 GMT

@Takefumi Oide

From Ambari side currently i do not see any such option to enable the "IPAccessHandler" handler without Ambari Code changes.

This is correct that ambari uses Jetty API and it makes use of Handlers "org.eclipse.jetty.server" APIs via Java code (programatic way) but unfortunately it does not use the "IPAccessHandler" directly.
https://github.com/apache/ambari/blob/release-2.7.0/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java#L141-L143

These handlers are added programmatically (not via configuration params) like following code:

handlerList.addHandler(gzipHandler);

As it is done via Java code hence without code change i do not see an option for ambari to make use of Jetty handler "org.eclipse.jetty.server.handler.IPAccessHandler". It can not be achieved via configuration.

Re: How do I restrict access to Ambari WebUI by IP address?

toide — Thu, 18 Oct 2018 16:49:09 GMT

Thanks, @Jay Kumar SenSharma