Airflow Connector security and HTTPS configuration

Products

• Automation Analytics & Intelligence

Issue/Introduction

When setting up the Airflow connector on the same server as the Automation Analytics & Intelligence (AAI) instance, users may consider using a loopback address (127.0.0.1) on port 8080 to maintain security while avoiding HTTPS configuration. This article explains the security implications and the recommended configuration for hardened environments where HTTP is disabled.

Environment

• Automation Analytics & Intelligence (AAI) 24.4
• AAI Airflow Connector

Cause

N/A

Resolution

 Binding a service to the localhost loopback address (127.0.0.1) does not guarantee that the service is inaccessible from outside the server, as it may remain reachable via the server's hostname.