Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable OneGate proxy service #6281

Closed
4 of 7 tasks
rsmontero opened this issue Jul 25, 2023 · 0 comments
Closed
4 of 7 tasks

Disable OneGate proxy service #6281

rsmontero opened this issue Jul 25, 2023 · 0 comments
Assignees

Comments

@rsmontero
Copy link
Member

rsmontero commented Jul 25, 2023

Description
There are some requirements to make onegate proxy to work that may suppose a security threat for VMs (e.g. exposing the host to the VM network). Also the management of this addtional IP's needed by the proxy are not fully integrated in OpenNebula (i.e. those IP's need to be put on HOLD so they cannot be impersonated by the VMs, or completely removed from the AR).

This issue is to remove the current implementation:

  • Documentation in advanced section. Improve the documentation to suggest a network layout
  • packages
  • proxy code and gem dependencies
  • context packages (default static route)

To Reproduce

Expected behavior

Details

  • Affected Component: OneGate Proxy
  • Hypervisor: -
  • Version: 6.6

Additional context

Progress Status

  • Code committed
  • Testing - QA
  • Documentation (Release notes - resolved issues, compatibility, known issues)
@rsmontero rsmontero added this to the Release 6.8 milestone Jul 25, 2023
@rsmontero rsmontero modified the milestones: Release 6.8, Release 6.8.1 Oct 3, 2023
@tinova tinova modified the milestones: Release 6.8.1, Release 6.8.2 Nov 21, 2023
@tinova tinova modified the milestones: Release 6.8.2, Release 7.0 Jan 11, 2024
@rsmontero rsmontero modified the milestones: Release 7.0, Release 6.10.0 Apr 16, 2024
rsmontero pushed a commit that referenced this issue Jul 25, 2024
This commit implements a transparent proxy for OneGate service (as well as any other  TCP service)
* #6281: Disable legacy OneGateProxy
* Implement OneGateProxy in VN drivers
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants