Mongo DB安全配置

Question

假设我正在具有公共IP地址"120.*.*.*”的服务器上运行mongodb实例。出于安全目的，我希望允许来自具有公共IP "40.*.*.*"和“ {{1}”的服务器的传入连接}“。实现此目标的方法是什么。

Answer 1

选择1）mongodb 3.6：

use admin
db.createUser(
   {
     user: "restricted",
     pwd: "password",
     roles: [ { role: "readWrite", db: "reporting } ],
     authenticationRestrictions: [ {
        clientSource: ["40.0.0.0","12.0.0.0"],
        serverAddress: ["120.0.0.0"]
     } ]
   }
)

opt 2）通过操作系统防火墙