Hi All & Rob,

I think there is a security issue where XAPI is exposed on all available
interfaces as well as all IPs of dom0. Currently XCP1.6 xapi listens on all
IPs. Default 0.0.0.0

XCP1.1 used the correct interface and IP.

What alternative one has if he wants to make XAPI listen only on management
network since management network is created for such purpose.

For now, I have patched the xapissl from init.d to make it listen only
on MANAGEMENT_INTERFACE ip.

Thanks.
_______________________________________________
Xen-api mailing list
Xen-api@lists.xen.org
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api

Reply via email to