Hardening the Distribution Cookie & Node Access
Lock down which nodes can connect to your cluster using cookies, allowed-node lists, and network isolation to prevent unauthorized access.
How Nodes Authenticate
Erlang nodes form a cluster by sharing a secret cookie. Any node that knows the cookie and can reach the port may connect — and once connected, can run arbitrary code. This makes the cookie a critical secret.
The Magic Cookie
By default each node reads its cookie from ~/.erlang.cookie. If two nodes share it, they trust each other completely.
erlang:get_cookie().All lessons in this course
- Secure Node Communication (TLS)
- Authentication & Authorization
- Protecting Sensitive Data
- Hardening the Distribution Cookie & Node Access