Apache Solr Reference Guide
About This Guide
Solr Tutorial
Getting Started
Solr Control Script Reference
Using the Solr Administration User Interface
Documents, Fields, and Schema Design
Understanding Analyzers, Tokenizers, and Filters
Indexing and Basic Data Operations
Searching
The Well-Configured Solr Instance
Managing Solr
SolrCloud
Legacy Scaling and Distribution
Client APIs
Further Assistance
Solr Glossary
Errata
How to Contribute to Solr Documentation

Securing Solr

When planning how to secure Solr, you should consider which of the available features or approaches are right for you.

Authentication or authorization of users using:
Enabling SSL
If using SolrCloud, ZooKeeper Access Control

No Solr API, including the Admin UI, is designed to be exposed to non-trusted parties. Tune your firewall so that only trusted computers and people are allowed access. Because of this, the project will not regard e.g., Admin UI XSS issues as security vulnerabilities. However, we still ask you to report such issues in JIRA.

Managing Solr Authentication and Authorization Plugins

Comments on this Page

We welcome feedback on Solr documentation. However, we cannot provide application support via comments. If you need help, please send a message to the Solr User mailing list.