Neo4j Bolt and HTTP connectors: does disabling authentication expose both protocols on all interfaces?
When authentication is disabled in Neo4j ( dbms.security.auth_enabled=false ), the server accepts connections without credentials. The Bolt connector ( dbms.bolt.address ) and the HTTP connector ( dbms.http.address or dbms.connector.http.address ) each have independent bind‑address settings. In many deployment formats the default is to bind both to 0.0.0.0,
neo4j