puppet-openstack-integration/manifests/memcached.pp
Emilien Macchi 5210dd7903 [CVE-2018-1000115] memcached: restrict to TCP
https://access.redhat.com/security/cve/cve-2018-1000115

Restrict Memcached to only work on TCP.
The configuration only binds memcached on localhost but in case it
changes, we'll prevent DDoS amplification attacks.

Change-Id: Ib87b41b9f22549ec49788721b5806c972f3c5d2f
2018-03-09 22:36:07 +01:00

9 lines
192 B
Puppet

class openstack_integration::memcached {
include ::openstack_integration::config
class { '::memcached':
listen_ip => $::openstack_integration::config::host,
udp_port => 0,
}
}