dustin/metricspi
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

pkg/v-m: vmagent: Remove IP address restrictions
All checks were successful
dustin/metricspi/pipeline/head This commit looks good
Details

Browse Source 
Setting `IPAddressAllow` and `IPAddressDeny` instructs systemd to
construct BPF firewall rules to restrict traffic.  Since `vmagent` is
responsible for scraping metrics from hosts on the network, it does not
make any sense to restrict it to localhost-only communication.
This commit is contained in:
Dustin
2022-08-07 21:29:26 -05:00
parent c1a6f3bb8e
commit 7fddc6fef5
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/victoriametrics/vmagent.service
View File

@@ -19,8 +19,6 @@ ReadWritePaths=/var/lib/victoria-metrics
CapabilityBoundingSet=
DeviceAllow=
DevicePolicy=closed
IPAddressAllow=localhost
IPAddressDeny=any
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes