Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C753510D38 for ; Sat, 2 Nov 2013 01:09:22 +0000 (UTC) Received: (qmail 50594 invoked by uid 500); 2 Nov 2013 01:09:21 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 50484 invoked by uid 500); 2 Nov 2013 01:09:21 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 50360 invoked by uid 500); 2 Nov 2013 01:09:20 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 50357 invoked by uid 99); 2 Nov 2013 01:09:20 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 02 Nov 2013 01:09:20 +0000 Date: Sat, 2 Nov 2013 01:09:20 +0000 (UTC) From: "ASF subversion and git services (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-5017) If SSVM is unavailable DownloadCommands will be routed to mgmt server MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-5017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13811825#comment-13811825 ] ASF subversion and git services commented on CLOUDSTACK-5017: ------------------------------------------------------------- Commit 24af28290ec3ea6a18c66544dbfd8678d6f7d19b in branch refs/heads/master from [~minchen07] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=24af282 ] CLOUDSTACK-5017: use LocalHostEndPoint in copying from S3 to cache store during ssvm launch. > If SSVM is unavailable DownloadCommands will be routed to mgmt server > --------------------------------------------------------------------- > > Key: CLOUDSTACK-5017 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5017 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Components: Storage Controller > Affects Versions: 4.2.0 > Reporter: Darren Shepherd > Assignee: Min Chen > Priority: Blocker > Fix For: 4.3.0 > > > If a SSVM in the zone is not available, meaning either it does not exist or the host entry is not Up or Connecting, DownloadCommand will get routed to LocalHostEndpoint. This is particularily dangerous in a NFS setup. If the mgmt server handles the DownloadCommand it has sudo access to mount NFS and perform the action. This mean the mgmt server is now in the data path, or worse, it could hang if it does not have network access to the NFS server. -- This message was sent by Atlassian JIRA (v6.1#6144)