openstack/swift
Code Issues Proposed changes

Only bind SAIO daemons to localhost

Browse Source 
The SAIO configs have no default bind_ip setting configured
which causes them to listen on all available IP addresses.
This can be dangerous on a test machine with public interfaces,
especially with the default passwords set. Its reasonable to
choose a more restrictive setup, especially in SAIO which uses
127.0.0.1 throughout ring-builder, example commands and the
probe tests.

Change-Id: I471c49705ce09e07ec7acc07ee42a1e220529b82
This commit is contained in:
Andrew Hale 2014-09-01 18:53:30 +01:00 committed by John Dickinson
parent c5013783ac
commit 8e9b16a9ea
13 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
doc/saio/swift/account-server/1.conf
View File

@ -2,6 +2,7 @@
devices = /srv/1/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6012
workers = 1
user = <your-user-name>

1
doc/saio/swift/account-server/2.conf
View File

@ -2,6 +2,7 @@
devices = /srv/2/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6022
workers = 1
user = <your-user-name>

1
doc/saio/swift/account-server/3.conf
View File

@ -2,6 +2,7 @@
devices = /srv/3/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6032
workers = 1
user = <your-user-name>

1
doc/saio/swift/account-server/4.conf
View File

@ -2,6 +2,7 @@
devices = /srv/4/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6042
workers = 1
user = <your-user-name>

1
doc/saio/swift/container-server/1.conf
View File

@ -2,6 +2,7 @@
devices = /srv/1/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6011
workers = 1
user = <your-user-name>

1
doc/saio/swift/container-server/2.conf
View File

@ -2,6 +2,7 @@
devices = /srv/2/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6021
workers = 1
user = <your-user-name>

1
doc/saio/swift/container-server/3.conf
View File

@ -2,6 +2,7 @@
devices = /srv/3/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6031
workers = 1
user = <your-user-name>

1
doc/saio/swift/container-server/4.conf
View File

@ -2,6 +2,7 @@
devices = /srv/4/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6041
workers = 1
user = <your-user-name>

1
doc/saio/swift/object-server/1.conf
View File

@ -2,6 +2,7 @@
devices = /srv/1/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6010
workers = 1
user = <your-user-name>

1
doc/saio/swift/object-server/2.conf
View File

@ -2,6 +2,7 @@
devices = /srv/2/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6020
workers = 1
user = <your-user-name>

1
doc/saio/swift/object-server/3.conf
View File

@ -2,6 +2,7 @@
devices = /srv/3/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6030
workers = 1
user = <your-user-name>

1
doc/saio/swift/object-server/4.conf
View File

@ -2,6 +2,7 @@
devices = /srv/4/node
mount_check = false
disable_fallocate = true
bind_ip = 127.0.0.1
bind_port = 6040
workers = 1
user = <your-user-name>

1
doc/saio/swift/proxy-server.conf
View File

@ -1,4 +1,5 @@
[DEFAULT]
bind_ip = 127.0.0.1
bind_port = 8080
workers = 1
user = <your-user-name>