As a security measure, we recommend you prevent direct browser access to the UI for all Edge Nodes.

Disable Exposing the API Service for Edge Nodes ​

Cribl recommends that in enterprise Distributed deployments, you disable exposing the API service to the network on the configured API port for all Edge Nodes.

1. Select a Fleet.
2. Open Fleet Settings (top right).
3. Under General Settings > API Server Settings, select Advanced.
4. Toggle Listen on port off.
5. Select Save.

Secure Browser Access to Edge Node ​

Cribl recommends that in enterprise Distributed deployments, you prevent direct browser access to the UI for all Edge Nodes.

On the Leader Node, start by enabling UI access to Edge Nodes (Stream, Edge). This way, admins will still be able to tunnel through from the Leader to the UI on any Edge Node. This is also a prerequisite for securing Leader-Node Communication with TLS.

1. Select a Fleet.
2. Open Fleet Settings (top right).
3. Under General Settings > API Server Settings, select Advanced.
4. Toggle Local UI access off.
5. Select Save.