openstack/octavia
Code Issues Proposed changes
ca6ef769a0
octavia/elements/rebind-sshd
History
Bernard Cafarelli d43d3fce86 Rework amphora agent installation element 
Merge source and RHEL elements, allowing both source and package based
installations.

Allow amphora agent install from distribution packages (not limited to
RHEL)

Add a new option to diskimage-create.sh script to do so (default is kept
to source installation from Octavia git tree)

For now, amphorae built with distribution packages will have SELinux
(when available) running in permissive mode.

Made the rebind-sshd element generic to streamline the script
Use POSIX syntax for logrotate kill command

Change-Id: I391b2a95d54c7b9fd8f31d3e2c136ff9cc3451f1
2018-01-22 18:04:41 -08:00
..
finalise.d Rework amphora agent installation element 2018-01-22 18:04:41 -08:00
README.rst Make SSH bind to management net only 2016-03-04 13:58:33 -08:00

README.rst

This element adds a post-BOUND script to the dhclient configuration to rebind the ssh daemon to listen only on the management network interface. The reason for doing this is that some use cases require load balancing services on TCP port 22 to work, and if SSH binds to the wildcard address on port 22, then haproxy can't.

This also has the secondary benefit of making the amphora slightly more secure as its SSH daemon will only respond to requests on the management network.