openstack/ansible-hardening
Code Issues Proposed changes

V-3854{8,9}, V-38553: IPv6 filtering/security

Browse Source 
Implements: blueprint security-hardening

Change-Id: I1fcca68c70ce7953e9bf8dad79dce1eb3f5592bc
This commit is contained in:
Major Hayden 2015-10-07 16:24:07 -05:00
parent bfcf6c7423
commit b9abc962d9
3 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/source/developer-notes/V-38548.rst Normal file
View File

@ -0,0 +1,4 @@
**Exception**
Disabling IPv6 redirects can cause issues with OpenStack environments which
have IPv6 enabled and are routing IPv6 traffic.

6
doc/source/developer-notes/V-38549.rst Normal file
View File

@ -0,0 +1,6 @@
**Exception**
Adding IPv6 firewalling on OpenStack hosts is left up to the deployer to
configure. Deployers are urged to use proper network segmentation between
their OpenStack infrastructure and virtual machines, which will mitigate
many of the most critical threats.

1
doc/source/developer-notes/V-38553.rst Symbolic link
View File

@ -0,0 +1 @@
V-38549.rst