Qdrant's internal cluster port needs its own access controls Version 1.20.0 enables peer authentication by default, but only when an API key exists. Public API protection alone can leave clustered data exposed.