How to listen only to localhost on MongoDB

UbuntuMongodbnode.js

Ubuntu Problem Overview


MongoDB Suggests that the easy way to handle security is to run it in a trusted environment, given that, "in such a configuration, one must be sure only trusted machines can access database TCP ports."

What would be the best approach for doing this? Is there a way for mongodb to natively only listen to localhost?

I'm using ubuntu 10.10

Ubuntu Solutions


Solution 1 - Ubuntu

Add the following line into mongodb.conf:

bind_ip = 127.0.0.1

As @Josh Rickard stated in comments: don't forget to restart the process after updating the config file:

service mongodb restart

Solution 2 - Ubuntu

As Andreas mentioned in a round-about way:

mongod --bind_ip 127.0.0.1

Solution 3 - Ubuntu

Note that although it didn't appear in the documentation last time I checked, you can also put this setting in the .conf file (vs. command line).

No setting = bind to all ips.

Solution 4 - Ubuntu

No one mentioned the location of the mongodb.conf file which is /etc/mongodb.conf . Double check before running the following commands.

echo "bind_ip = 127.0.0.1" >> /etc/mongodb.conf
service mongodb restart

Solution 5 - Ubuntu

This configuration appears to be default in 4.4 on Windows ...

C:\Program Files\MongoDB\Server\4.4\bin\mongod.cfg

# network interfaces
net:
  port: 27017
  bindIp: 127.0.0.1

... in case there are any other "poor, unfortunate souls" supporting or using it.

Attributions

All content for this solution is sourced from the original question on Stackoverflow.

The content on this page is licensed under the Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Content TypeOriginal AuthorOriginal Content on Stackoverflow
QuestionStephenView Question on Stackoverflow
Solution 1 - UbuntufreedevView Answer on Stackoverflow
Solution 2 - UbuntuScott HernandezView Answer on Stackoverflow
Solution 3 - UbuntuThibaut BarrèreView Answer on Stackoverflow
Solution 4 - UbuntuRickView Answer on Stackoverflow
Solution 5 - UbuntuCodeShaneView Answer on Stackoverflow