zoopeeper设置acl权限控制(只允许特定ip访问，加强安全)

最新推荐文章于 2025-10-07 05:45:00 发布

原创

最新推荐文章于 2025-10-07 05:45:00 发布 · 2.6k 阅读

5 ·

CC 4.0 BY-SA版权

文章标签：

#tcp/ip #安全 #apache

本文详细介绍了如何在Zookeeper 3.6.1 Docker部署中设置ACL权限，仅允许特定IP地址访问，包括登录步骤、配置示例和恢复默认权限的过程。

前言

为了加强访问zookeeper的安全，防止侵入式攻击，设置acl权限控制，只允许特定的Ip访问

acl配置ip

这里以zookeeper版本3.6.1为例，采取docker方式部署

登陆执行终端

语法

zkCli.sh -server <IP>:<port>

]# docker exec -it zookeeper /bin/bash
root@zookeeper:/apache-zookeeper-3.6.1-bin# /apache-zookeeper-3.6.1-bin/bin/zkCli.sh  -server 192.168.3.80:2181
Connecting to 192.168.3.80:2181
2022-06-15 16:18:55,868 [myid:] - INFO  [main:Environment@98] - Client environment:zookeeper.version=3.6.1--104dcb3e3fb464b30c5186d229e00af9f332524b, built on 04/21/2020 15:01 GMT
2022-06-15 16:18:55,873 [myid:] - INFO  [main:Environment@98] - Client environment:host.name=<NA>
2022-06-15 16:18:55,873 [myid:] - INFO  [main:Environment@98] - Client environment:java.version=11.0.8
2022-06-15 16:18:55,876 [myid:] - INFO  [main:Environment@98] - Client environment:java.vendor=N/A
2022-06-15 16:18:55,876 [myid:] - INFO  [main:Environment@98] - Client environment:java.home=/usr/local/openjdk-11
2022-06-15 16:18:55,877 [myid:] - INFO  [main:Environment@98] - Client environment:java.class.path=/apache-zookeeper-3.6.1-bin/bin/../zookeeper-server/target/classes:/apache-zookeeper-3.6.1-bin/bin/../build/classes:/apache-zookeeper-3.6.1-bin/bin/../zookeeper-server/target/lib/*.jar:/apache-zookeeper-3.6.1-bin/bin/../build/lib/*.jar:/apache-zookeeper-3.6.1-bin/bin/../lib/zookeeper-prometheus-metrics-3.6.1.jar:/apache-zookeeper-3.6.1-bin/bin/../lib/zookeeper-jute-3.6.1.jar:/apache-zookeeper-3.6.1-bin/bin/../lib/zookeeper-3.6.1.j