diff --git a/trunk/conf/full.conf b/trunk/conf/full.conf
index 9c35d1922..072af08d3 100644
--- a/trunk/conf/full.conf
+++ b/trunk/conf/full.conf
@@ -230,11 +230,11 @@ http_api {
         # default: off
         allow_reload        off;
         # whether enable rpc query.
-        # default: off
-        allow_query         off;
+        # Always off by https://github.com/ossrs/srs/issues/2653
+        #allow_query         off;
         # whether enable rpc update.
-        # default: off
-        allow_update        off;
+        # Always off by https://github.com/ossrs/srs/issues/2653
+        #allow_update        off;
     }
     # For https_api or HTTPS API.
     https {
diff --git a/trunk/conf/http.api.raw.conf b/trunk/conf/http.api.raw.conf
index df0180fbc..6c5531a60 100644
--- a/trunk/conf/http.api.raw.conf
+++ b/trunk/conf/http.api.raw.conf
@@ -11,8 +11,6 @@ http_api {
     raw_api {
         enabled             on;
         allow_reload        on;
-        allow_query         on;
-        allow_update        on;
     }
 }
 http_server {