[PATCH dpdk] telemetry-exporter: listen on loopback by default
Thomas Monjalon
thomas at monjalon.net
Tue Nov 11 18:44:09 CET 2025
27/01/2025 12:51, Robin Jarry:
> Fix the following warning reported by Coverity:
>
> Defect type: SIGMA.insecure_network_bind:
> > dpdk-stable-24.11.1/usertools/dpdk-telemetry-exporter.py:278:
> > Sigma main event: The HTTP server binds to all network interfaces by
> > setting the IP address to "", `0.0.0.0`, `::`, or `::0`.
> > This may expose the server to unintended traffic.
>
> Avoid listening to all interfaces by default to avoid exposing private
> information unwillingly.
>
> Unrelated: The Python stdlib TCP server listens on IPv4 only by default.
> Changing this requires creating a subclass that overrides address_family
> to socket.AF_INET6.
>
> Fixes: d94ebd627a86 ("usertools: add telemetry exporter")
> Cc: stable at dpdk.org
> Signed-off-by: Robin Jarry <rjarry at redhat.com>
Applied, thanks.
More information about the dev
mailing list