dustin
/
metricspi
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

pkg/v-m: vmagent: Remove IP address restrictions
dustin/metricspi/pipeline/head This commit looks good Details 

Setting `IPAddressAllow` and `IPAddressDeny` instructs systemd to
construct BPF firewall rules to restrict traffic.  Since `vmagent` is
responsible for scraping metrics from hosts on the network, it does not
make any sense to restrict it to localhost-only communication.
pull/2/head
Dustin 2022-08-07 21:29:26 -05:00
parent c1a6f3bb8e
commit 7fddc6fef5
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/victoriametrics/vmagent.service
View File

@ -19,8 +19,6 @@ ReadWritePaths=/var/lib/victoria-metrics
CapabilityBoundingSet= CapabilityBoundingSet=
DeviceAllow= DeviceAllow=
DevicePolicy=closed DevicePolicy=closed
IPAddressAllow=localhost
IPAddressDeny=any
LockPersonality=yes LockPersonality=yes
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes
NoNewPrivileges=yes NoNewPrivileges=yes