As a security measure, we recommend you prevent direct browser access to the UI for all Worker Nodes.

Disable Exposing the API Service for Worker Nodes ​

Cribl recommends that in enterprise Distributed deployments, you disable exposing the API service to the network on the configured API port for all Worker Nodes.

1. Select a Worker Group.
2. Open Worker Group Settings (top right).
3. Under General Settings > API Server Settings, select Advanced.
4. Toggle Listen on port off.
5. Select Save.

Secure Browser Access to Worker Node ​

Cribl recommends that in enterprise Distributed deployments, you prevent direct browser access to the UI for all Worker Nodes.

On the Leader Node, start by enabling UI access to Worker Nodes (Stream, Edge). This way, admins will still be able to tunnel through from the Leader to the UI on any Worker Node. This is also a prerequisite for securing Leader-Node Communication with TLS.

1. Select a Worker Group.
2. Open Worker Group Settings (top right).
3. Under General Settings > API Server Settings, select Advanced.
4. Toggle Local UI access off.
5. Select Save.