How to configure security for PolyBase RRS feed

  • Question

  • I'm installing SQL Server 2019 on a new production machine and would like to know the security considerations for having this feature. This will be a "stand alone" server instance.  Right now we don't have any use cases for this feature but we think it might be useful for some new projects coming up.

    A while back I installed this feature on a development machine (but never used it).  During the installation I was prompted to input a port range.  My concern is opening up these ports, especially since they wont be used for a while (and maybe never).  What is the "best practices" for securing these ports?

    Should I make a firewall rule to allow only specific IP addresses for incoming calls?  For example, if I want to connect to Hadoop, I would add the IP address for where Hadoop is coming from, etc.

    What else should I do to lock this down?

    Thank you.

    Saturday, August 1, 2020 6:41 PM

All replies