Comment 10 for bug 1006414

Revision history for this message
Chmouel Boudjnah (chmouel) wrote : Re: [Bug 1006414] Re: Insecure loads()

On Fri, Jun 15, 2012 at 10:38 AM, Thomas Biege <email address hidden> wrote:
> The open question for me is only the level of impact. How likely is it to gain access to the internal network for an external attacker or an untrusted customer/user using a VM instance? What I heard from Sebastian is that it is really hard to separate the network if the attacker is an untrusted customer

Are you speaking from nova to swift ? Usually the private networks
would be on different networks between nova and swift only the proxy
will be exposed to the VM and the memcached services will be only
listening to the private interface on the Swift side and due not
exposed to the VMs.

Chmouel,