Re: [PR] SSVM: 'allow from' private IP in other SSVMs if the public IP is in allowed internal sites cidrs [cloudstack]

[via GitHub]

weizhouapache commented on PR #7288:
URL: https://github.com/apache/cloudstack/pull/7288#issuecomment-2969227855

   > @weizhouapache ,
   > 
   > I have this issue reported here: #5678
   > 
   > Since SSVM serves client's requests for downloading and uploading ISOs, 
Templates, etc on the Public network:
   > 
   > 
![image](https://private-user-images.githubusercontent.com/90287660/454575381-1681cd26-2980-49b9-8ddb-e07138622445.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.I7T931ldO7RaPoodPWgZKESqDQheO95m2gxSdWtk0nI)
   > 
   > As you can see, the traffic that comes from the Public is responded via 
the Private (Management) network, breaking communication.
   > 
   > What am I miss understanding from the feature provided by the setting 
`secstorage.allowed.internal.sites`?
   
   @daviftorres 
   I think you have answered the questions in #11020 , right ?
   
   IMHO, there is no issue with routes, or `.htaccess` for setting 
`secstorage.allowed.internal.sites` in SSVM. 
   let's discuss in #11020
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org