Skip to content
PERCONA MONITORING AND MANAGEMENT DOCUMENTATION

For help, click the link below to get free database assistance or contact our experts for personalized support.

Get help from Percona

MongoDB BindIP Check

Description

This check returns a warning if MongoDB network binding setting is not recommended. This is to avoid possible security breach from listening to unidentified client IP addresses.

For more information, see the MongoDB documentation.

Rule

db.adminCommand({'getCmdLineOpts':1}).parsed.net.bindIp

net = parsed.get("net", {})
            bindIP = (net.get("bindIp") == "0.0.0.0")
            bindIP = bindIP or ("bindIpAll" in net)

Resolution

Adjust network binding settings:

  1. Adjust IP addresses in net.bindIp or bindIpAll boolean flag
  2. Edit mongod.conf and set the following parameter:

net: bindIp: <private IP or hostname of DB server> #bindIpAll: false //Any of these parameters might be enabled so adjust accordingly 3. Roll-restart your mongod nodes to apply the changes.

Need more support from Percona?

Percona experts bring years of experience in tackling tough database performance issues and design challenges.