[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-API] CP-3477: Make xapi listen on all dom0 IP addresses

Hi All & Rob,

I think there is a security issue where XAPI is exposed on all available interfaces as well as all IPs of dom0. Currently XCP1.6 xapi listens on all IPs. Default

XCP1.1 used the correct interface and IP.

What alternative one has if he wants to make XAPI listen only on management network since management network is created for such purpose.

For now, I have patched the xapissl from init.d to make it listen only on MANAGEMENT_INTERFACE ip.

Xen-api mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.