interserver_listen_host
Restriction on hosts that can exchange data between ClickHouse servers. If Keeper is used, the same restriction will be applied to the communication between different Keeper instances.- Default:
listen_host
By default, the value is equal to the
listen_host setting.interserver_tables_status_require_auth
Require interserverTablesStatusRequest to be authenticated with the cluster
<secret>. Clients new enough to send a secret hash (protocol revision
DBMS_MIN_REVISION_WITH_INTERSERVER_SECRET_TABLES_STATUS) are always validated; this
setting additionally rejects older clients that send no hash, which is what closes the
unauthenticated table-status disclosure by default.
Defaults to true (secure by default). During a rolling upgrade a not-yet-upgraded
node speaks the old protocol and sends no hash, so a Distributed query initiated on
such a node against an already-upgraded node would have its TablesStatusRequest
rejected. If you must run a mixed-version cluster, set this to false on the upgraded
nodes until every node is upgraded, then remove the override.