4 ms·
This is definitely a cool hack, but please be mindful of the security considerations of deploying something like this on the internet. Running an open proxy tha
by cstejerean 14y ago
This is definitely a cool hack, but please be mindful of the security considerations of deploying something like this on the internet. Running an open proxy that allows any client to perform arbitrary TCP connections bouncing through your servers is a bad idea.
First, you need to worry about the security implications of each internal server that you expose intentionally. Just how much damage can someone with direct access to your Redis instance cause? Better read http://redis.io/topics/security http://redis.io/topics/security, and repeat this for every other service you want to expose.
Second, you are going to effectively need a whitelist of allowed connections, either in the proxy, or at the firewall level (which most people are going to forget to configure, if they even know how). Without that you are going to allow arbitrary bypass of your firewall for internal services, as well as effectively running an open proxy for anyone looking to bounce their malicious traffic through your server.
- aidenn0 14y agoYeah, just look at all the havoc caused by anonymous FXP in the '90s