openstack-ansible-memcached.../templates/memcached.redhat.j2
ZhongShengping 60adcff1ea [CVE-2018-1000115] memcached: restrict to TCP
https://access.redhat.com/security/cve/cve-2018-1000115

Restrict Memcached to only work on TCP.
The configuration only binds memcached on localhost but in case it
changes, we'll prevent DDoS amplification attacks.

Change-Id: Ifc16c8a3229f5fc0f3651e714627b526e4338cfe
Closes-Bug: #1755063
2018-03-12 09:51:36 +08:00

14 lines
347 B
Django/Jinja

# {{ ansible_managed }}
{% if debug | bool %}
{% set _verbosity = '-vvv' %}
{% else %}
{% set _verbosity = '-v' %}
{% endif %}
PORT="{{ memcached_port }}"
USER="{{ memcached_user }}"
MAXCONN="{{ memcached_connections }}"
CACHESIZE="{{ memcached_memory }}"
OPTIONS="-U 0 -l {{ memcached_listen }} -t {{ memcached_threads }} {{ _verbosity }}"