New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Agent security improvements #46

Open

ibot3 opened this issue Feb 2, 2023 · 0 comments

Contributor

ibot3 commented Feb 2, 2023

Currently, we mostly trust the input that comes from the controller. However, with knowing the shared-secret, some of these attacks may be possible

Sending load-balancing rules with IP-addresses not intended for load-balancing. For example, one may could let the agent create DNAT rules for SSH on the management IP-address.
-> Create an (optional) IP-address whitelist on the agent
Doing "NFTables-Injection" by inserting malicious nftables control characters
Pushing malicious keepalived config

ibot3 mentioned this issue

Add compatibility for VyOS bare-metal setup #41

Merged

9 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment