Cassandra native transport: PasswordAuthenticator versus network-only isolation
Goal: prevent accidental public access to the Apache Cassandra native transport port 9042 in a self-managed cluster running Cassandra 4.x. By default, AllowAllAuthenticator is active and the transport can bind to 0.0.0.0, so an exposed interface allows unauthenticated CQL access. Two documented controls address this: enabling PasswordAuthenticator in cassand
cassandra