Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restructure perfsonar-toolkit-security package #382

Open
5 tasks
arlake228 opened this issue May 29, 2019 · 2 comments
Open
5 tasks

Restructure perfsonar-toolkit-security package #382

arlake228 opened this issue May 29, 2019 · 2 comments
Assignees

Comments

@arlake228
Copy link
Contributor

arlake228 commented May 29, 2019

It was decided we would like to further breakout the perfsonar-toolkit-security package instead more packages (maybe without toolkit in the name) that represent the individual functions so it is not all or nothing. This would give users more flexibility and make it easier for Ansible to manage firewalls. We probably ant packages for the following:

  • open http(s)-related ports (i.e. esmond, pscheduler, maddash)
  • open individual tool ports (OWAMP, iperf3, etc)
  • Configure apache (and maybe an extra secure version for federal users)
  • Configure memcached security
  • Set up fail2ban

Will need to finalize how we organize these and may think of other things. We can still have a perfsonar-toolkit-security but it will depend on the sub-packages

@arlake228
Copy link
Contributor Author

Look at adding a "-security" package to some of the individual packages that depend on these so people have an easy option to adding the security options they need.

@laeti-tia
Copy link
Member

laeti-tia commented Jan 22, 2020

Once we have that, we should also then look if some of the sub-packages are worthy of use in the testpoint bundle (i.e. for securing httpd and memcached as these are used by the testpoint too).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Ready
Development

No branches or pull requests

2 participants