Skip to content
Snippets Groups Projects
Commit 888891c7 authored by Michael Hanselmann's avatar Michael Hanselmann
Browse files

Remove DRBD version from SECURITY document. 

Reviewed-by: schreiberal
parent 70873231
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 5 additions and 5 deletions
SECURITY
+ 5
− 5
View file @ 888891c7
...@@ -65,8 +65,8 @@ client will refuse to connect to servers which don't have the ...@@ -65,8 +65,8 @@ client will refuse to connect to servers which don't have the
cluster-wide shared SSL certificate, and server will not allow clients cluster-wide shared SSL certificate, and server will not allow clients
which don't have the cluster-wide shared secret. which don't have the cluster-wide shared secret.
The DRBD traffic is not protected by anything, as the version of DRBD we The DRBD traffic is not protected by anything. DRBD does not support
require (0.7) does not have any protections. It's therefore recommended traffic encryption. It's therefore recommended to implement host-level
to implement host-level firewalling or to use a separate range of IP firewalling or to use a separate range of IP addresses for the DRBD
addresses for the DRBD traffic (this is supported in Ganeti) which is traffic (this is supported in Ganeti) which is not routed outside the
not routed outside the cluster. cluster.
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment