rurus9
1
Our security team observed a traffic to 35.169.37.138:61830.
We found in kong/kong/constants.lua (kong/kong/constants.lua at 254deec3cceef78654a1cba6eb32798c417e993a · Kong/kong · GitHub) this:
REPORTS = {
ADDRESS = “kong-hf.konghq.com”,
STATS_PORT = 61830
},
Are these anonymous statistics? I can’t find in official helm (we use 1.5.0 version) any switch to enable/disable this feature.
They are, yes. You can set https://github.com/Kong/kong/blob/master/kong.conf.default#L151-L152 off to disable those; in Helm you’ll set env.anonymous_reports: off in values.yaml.
rurus9
3
Thnx, @traines, seems it works!
(I just added:
--set env.anonymous_reports=off
to my helm command)
For anyone else trying to discover this information by searching for the error logs:
msg=“failed to forward report” error=“failed to send report: write tcp ->35.169.37.138:61833: write: broken pipe”