Can the API address be configured to use a Unix socket?

[paul-palmer]

I realize that the API address can be set to a port on 127.0.0.1, but that would still allow everyone with access to the system to connect. Is it possible to use a Unix socket as the address so that we can use file permissions to limit access to specific users?

[pront]

Hi @paul-palmer, are you referring to a specific config field?

[paul-palmer]

yes, the api.address configuration field

[pront]

I see, I suppose you are referring to https://vector.dev/docs/reference/api/#address.

In code:

vector/src/config/api.rs

Lines 15 to 17 in 8e15aeb

	/// The socket address to listen on for the API endpoint.
	#[serde(default = "default_address")]
	pub address: Option<SocketAddr>,

So currently no, but it is possible to enhance the above config to accept both.

[paul-palmer]

Created a feature request: #22224

[paul-palmer]

Thank you for your quick response.