search

threefoldtech / zos

Autonomous operating system
https://threefold.io/host/
Apache License 2.0
83 stars 13 forks source link

restrict outgoing traffic #2399

Open xmonader opened 1 month ago

xmonader commented 1 month ago

restricted outgoing network, only traffic to router is allowed (we get router info over DHCP, auto config) default whitelisted outgoing web traffic (can be turned off by farmer), which means VM's can only go to whitelisted services (https) and web domains (can be with filter e.g. *.ubuntu.com), this to make sure people cannot use our VM's for e.g. hacking the whitelists for outgoing traffic come from a github repo which is signed by us, this gets reloaded every hour

check with @delandtj

ashraffouda commented 6 days ago

blocked on specs from @delandtj