openstack/qinling
Code Issues Proposed changes

python2-runtime: limit cglimit listen on localhost only

Browse Source 
It doesn't make sense to expose the cglimit API to the outside as it is
only accessed locally. Limiting it only listen on localhost prevents
access from the outside and thus improves the security.

Change-Id: I941b7f8c33e5a631bef18df6667423c5bbdbf779
This commit is contained in:
Hunt Xu 2018-07-12 16:00:26 +08:00
parent abba847418
commit 30fcd00be4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
runtimes/python2/custom-entrypoint.sh
View File

@ -3,4 +3,4 @@
uwsgi --http :9090 --uid qinling --wsgi-file server.py --callable app --master --processes 5 --threads 1 &
uwsgi --http :9092 --uid root --wsgi-file cglimit.py --callable app --master --processes 1 --threads 1
uwsgi --http 127.0.0.1:9092 --uid root --wsgi-file cglimit.py --callable app --master --processes 1 --threads 1