You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by "btzq (via GitHub)" <gi...@apache.org> on 2024/09/14 08:36:15 UTC
[D] Does Cloudstack VPC support TLS for Inter VM Communications [cloudstack]
GitHub user btzq created a discussion: Does Cloudstack VPC support TLS for Inter VM Communications
In a typical deployment all traffic transmitted over public networks is secured, but security best practice dictates that internal traffic must also be secured. It is insufficient to rely on security domain separation for protection. (Eg. Dedicated VPC for differenc sutomers).
If an attacker gains access to the hypervisor or host resources, compromises an API endpoint, or any other service, they must not be able to easily inject or capture messages, commands, or otherwise affect the management capabilities of the cloud.
I cant seem to find any documentation from Cloudstack supporting TLS within its VPC. Is this possible?
GitHub link: https://github.com/apache/cloudstack/discussions/9682
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] Does Cloudstack VPC support TLS for Inter VM Communications [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
GitHub user DaanHoogland added a comment to the discussion: Does Cloudstack VPC support TLS for Inter VM Communications
@btzq traffic in the VPC is mostly the responcibility of the customer/user. They should make sure they secure their traffic. VPCs have their traffic secured by using specific vlan or other virtual network mechs, vxlan or in tungsten or NSX. Depending of what virtual network mech you use you might have more or less protection.
GitHub link: https://github.com/apache/cloudstack/discussions/9682#discussioncomment-10656660
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] Does Cloudstack VPC support TLS for Inter VM Communications [cloudstack]
Posted by "btzq (via GitHub)" <gi...@apache.org>.
GitHub user btzq closed a discussion: Does Cloudstack VPC support TLS for Inter VM Communications
In a typical deployment all traffic transmitted over public networks is secured, but security best practice dictates that internal traffic must also be secured. It is insufficient to rely on security domain separation for protection. (Eg. Dedicated VPC for differenc sutomers).
If an attacker gains access to the hypervisor or host resources, compromises an API endpoint, or any other service, they must not be able to easily inject or capture messages, commands, or otherwise affect the management capabilities of the cloud.
I cant seem to find any documentation from Cloudstack supporting TLS within its VPC. Is this possible?
GitHub link: https://github.com/apache/cloudstack/discussions/9682
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org