[Xen-API] CP-3477: Make xapi listen on all dom0 IP addresses

[Rushikesh Jadhav <2rushikeshj@xxxxxxxxx>]

Hi All & Rob,

I think there is a security issue where XAPI is exposed on all available interfaces as well as all IPs of dom0. Currently XCP1.6 xapi listens on all IPs. Default 0.0.0.0

XCP1.1 used the correct interface and IP.

What alternative one has if he wants to make XAPI listen only on management network since management network is created for such purpose.

For now, I have patched the xapissl from init.d to make it listen only on MANAGEMENT_INTERFACE ip.

Thanks.

_______________________________________________
Xen-api mailing list
Xen-api@xxxxxxxxxxxxx
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api