You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
There are some requirements to make onegate proxy to work that may suppose a security threat for VMs (e.g. exposing the host to the VM network). Also the management of this addtional IP's needed by the proxy are not fully integrated in OpenNebula (i.e. those IP's need to be put on HOLD so they cannot be impersonated by the VMs, or completely removed from the AR).
This issue is to remove the current implementation:
Documentation in advanced section. Improve the documentation to suggest a network layout
packages
proxy code and gem dependencies
context packages (default static route)
To Reproduce
Expected behavior
Details
Affected Component: OneGate Proxy
Hypervisor: -
Version: 6.6
Additional context
Progress Status
Code committed
Testing - QA
Documentation (Release notes - resolved issues, compatibility, known issues)
The text was updated successfully, but these errors were encountered:
This commit implements a transparent proxy for OneGate service (as well as any other TCP service)
* #6281: Disable legacy OneGateProxy
* Implement OneGateProxy in VN drivers
Description
There are some requirements to make onegate proxy to work that may suppose a security threat for VMs (e.g. exposing the host to the VM network). Also the management of this addtional IP's needed by the proxy are not fully integrated in OpenNebula (i.e. those IP's need to be put on HOLD so they cannot be impersonated by the VMs, or completely removed from the AR).
This issue is to remove the current implementation:
To Reproduce
Expected behavior
Details
Additional context
Progress Status
The text was updated successfully, but these errors were encountered: