[PATCH dpdk] telemetry-exporter: listen on loopback by default

Thomas Monjalon thomas at monjalon.net
Tue Nov 11 18:44:09 CET 2025


27/01/2025 12:51, Robin Jarry:
> Fix the following warning reported by Coverity:
> 
> Defect type: SIGMA.insecure_network_bind:
> > dpdk-stable-24.11.1/usertools/dpdk-telemetry-exporter.py:278:
> > Sigma main event: The HTTP server binds to all network interfaces by
> > setting the IP address to "", `0.0.0.0`, `::`, or `::0`.
> > This may expose the server to unintended traffic.
> 
> Avoid listening to all interfaces by default to avoid exposing private
> information unwillingly.
> 
> Unrelated: The Python stdlib TCP server listens on IPv4 only by default.
> Changing this requires creating a subclass that overrides address_family
> to socket.AF_INET6.
> 
> Fixes: d94ebd627a86 ("usertools: add telemetry exporter")
> Cc: stable at dpdk.org
> Signed-off-by: Robin Jarry <rjarry at redhat.com>

Applied, thanks.





More information about the dev mailing list