Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Date: Wed, 3 Oct 2012 08:11:08 +1100 (NCT)
From: "Clement Chen (JIRA)" <jira@apache.org>
To: cloudstack-dev@incubator.apache.org
Message-ID: <1081879938.156294.1349212268149.JavaMail.jiratomcat@arcas>
Subject: [jira] [Created] (CLOUDSTACK-242) haproxy listens on all interfaces
 on VR
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Clement Chen created CLOUDSTACK-242:
---------------------------------------

             Summary: haproxy listens on all interfaces on VR
                 Key: CLOUDSTACK-242
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-242
             Project: CloudStack
          Issue Type: Bug
          Components: Install and Setup
    Affects Versions: 4.0.0
            Reporter: Clement Chen


haproxy listens on all three network interfaces (public, guest and cloud link local) on port 35999 on a virtual router.

Listening on the public interface opens up an attack entry point. We should limit the interface haproxy listens to guest or cloud link local if possible.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira