Network security and bind IP in MongoDB

Introduction

Network security and bind IP help control who can connect to your MongoDB database. It keeps your data safe by limiting access to trusted computers.

When you want to allow only certain computers to access your database.

When you need to protect your database from unauthorized access over the internet.

When running MongoDB on a server that has multiple network interfaces.

When setting up a development environment that should not be accessible publicly.

When you want to restrict access to your database to improve security.

Syntax

MongoDB

net:
  bindIp: <ip_address1>,<ip_address2>,...
  port: <port_number>

The bindIp setting tells MongoDB which IP addresses to listen on for connections.

You can list multiple IP addresses separated by commas.

Examples

This example allows connections only from the local machine (localhost).

MongoDB

net:
  bindIp: 127.0.0.1
  port: 27017

This example allows connections from the local machine and a specific local network IP.

MongoDB

net:
  bindIp: 192.168.1.100,127.0.0.1
  port: 27017

This example allows connections from any IP address (not recommended for production).

MongoDB

net:
  bindIp: 0.0.0.0
  port: 27017

Sample Program

This configuration allows MongoDB to accept connections only from the local machine and the computer with IP 192.168.0.50.

MongoDB

# mongod.conf snippet
net:
  bindIp: 127.0.0.1,192.168.0.50
  port: 27017

Important Notes

Always restart MongoDB after changing the bindIp setting for changes to take effect.

Using 0.0.0.0 opens your database to all networks, which can be risky.

For better security, combine bindIp with authentication and firewalls.

Summary

Network security and bind IP control which computers can connect to your MongoDB.

Use bindIp to list allowed IP addresses.

Restricting IPs helps keep your data safe from unwanted access.