2 ms·
So you password protect the HTTP interface; is there anything that protects the 0mq interface? I used to for a PaaS and we made a mistake allowing one componen
by damm 13y ago
So you password protect the HTTP interface; is there anything that protects the 0mq interface?
I used to for a PaaS and we made a mistake allowing one component to run any command what so ever. This can seem appealing; but it's a security risk extraordinaire.
Security keeps taking a back seat to useability :(
- tarekmoz 13y agozeromq is not secured - but they are working on adding security in the protocol. In the meantime the safest way to avoid any security issue is to run IPC-only zeromq sockets or to set properly a firefwall and to use an SSH tunnel. There's such an option in Circus, where you can pass the ssh server to circusctl. also, read up http://circus.readthedocs.org/en/latest/design/security http://circus.readthedocs.org/en/latest/design/security