cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Min Chen <min.c...@citrix.com>
Subject Re: Open up ports beyond 80/443/8080 for downloading templates
Date Tue, 30 Jul 2013 16:41:37 GMT
Prasanna,
	Based on your comment, what will happen if we remove that check and still
NFS as secondary storage? In that case, register template is still done
through
SSVM. Any side effect? I had the same question as Tom when I was doing
object store refactoring, but hesitated to remove it because of not
knowing the history of it.

	Thanks
	-min

On 7/29/13 11:45 PM, "Prasanna Santhanam" <tsp@apache.org> wrote:

>On Tue, Jul 30, 2013 at 03:37:39PM +0900, Thomas O'Dowd wrote:
>> Thanks Ian. I had a look at this file. It's an easy fix to remove the
>> check from here but it's a general utility function so will also affect
>> other uris... If there is no reason to limit any uri to those ports then
>> I'd like to remove this check and open them up.
>> 
>> Interested to hear opinions,
>
>This is probably because earlier one would interact only with the SSVM
>to download any images off of secondary storage. With 4.2 that ability
>is transferred to the image store like say s3/cloudian and one can get
>direct http access to the image on the object store. The code in
>validateUrl assumes that the url check goes always to the SSVM on
>which only 80/443/8080 are open by default.
>
>-- 
>Prasanna.,
>
>------------------------
>Powered by BigRock.com
>


Mime
View raw message