Secure-Compliance-Solutions-LLC / GVM-Docker

Greenbone Vulnerability Management Docker Image with OpenVAS
https://securecompliance.gitbook.io/projects/
MIT License
246 stars 91 forks source link

[Enhancement] Squid proxy for restricted environments #344

Open vendito-david opened 2 years ago

vendito-david commented 2 years ago

Certain restricted environments have no internet connectivity and updating the image is problematic in those environments with rsync.

The OpenVAS image could use the existing SSH tunnel (forward a local port next to the unix socket) to access a Squid proxy running on the main GVM instance. Starting the proxy would be optional and in case it is not started, it wouldn't be possible to access it from the OpenVAS.

Standalone proxy could be also utilized with extra work, but this way only a single SSH connection is required for those restricted environments.

vendito-david commented 2 years ago

Paired with issue #16 in OpenVAS-Docker. https://github.com/Secure-Compliance-Solutions-LLC/OpenVAS-Docker/issues/16