You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@openwhisk.apache.org by GitBox <gi...@apache.org> on 2020/05/13 20:20:50 UTC

[GitHub] [openwhisk] aFuerst opened a new issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

aFuerst opened a new issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904


   ## Environment details:
   
   * standalone deployment, native ubuntu
   * Docker version 18.09.2, build 6247962
   * Description:    Ubuntu 16.04.5 LTS
   
   ## Steps to reproduce the issue:
   
   1.   Build standalone server `./gradlew :core:standalone:build`
   2.   Run with API gateway `java -jar ./bin/openwhisk-standalone.jar --api-gw --api-gw-port 4569`
   3.   Notice a Redis docker instance is created
   
   ## Provide the expected results and outputs:
   Custom configuration overriding [`standalone.conf` redis settings](https://github.com/apache/openwhisk/blob/master/core/standalone/src/main/resources/standalone.conf#L92) allows mounting custom `redis.conf` to the container, changing the docker host port, or just a setting password on Redis
   
   ## Provide the actual results and outputs:
   [API GW uses default Redis port and provides no way to override it or redis any config](https://github.com/apache/openwhisk/blob/master/core/standalone/src/main/scala/org/apache/openwhisk/standalone/ApiGwLauncher.scala#L57)
   
   ## Additional information you deem important:
   * This open Redis is a security vulnerability


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] aFuerst commented on issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
aFuerst commented on issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904#issuecomment-820509768


   @rabbah I would if I had the time, which wouldn't be for several more months at least


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] aFuerst commented on issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
aFuerst commented on issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904#issuecomment-628748161


   I am using it for local development but it's running on an internet-facing server. 
   
   Per the redis docker info the server launched has no security and is accessible from non-localhost sources. https://hub.docker.com/_/redis/


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] chetanmeh commented on issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
chetanmeh commented on issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904#issuecomment-628496224


   Standalone mode is recommended only for local development and not production uses. Does the redis bounds to all interfaces in your case or it is only bound to localhost


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] rabbah commented on issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
rabbah commented on issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904#issuecomment-670178458


   Setting a password on the redis server would be a good enhancement. @aFuerst would you be interested in contributing a pull request? 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] aFuerst closed issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
aFuerst closed issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [openwhisk] rabbah commented on issue #4904: Standalone Server API Gateway creates unconfigurable and open Redis instance

Posted by GitBox <gi...@apache.org>.
rabbah commented on issue #4904:
URL: https://github.com/apache/openwhisk/issues/4904#issuecomment-820591831


   Thanks @aFuerst - I am interested in doing this so one of us will get to it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org