search

zalando-stups / sevenseconds

THIS PROJECT IS NOT LONGER ACTIVELY MAINTAINED
https://pypi.python.org/pypi/stups-sevenseconds
Other
66 stars 17 forks source link

Disallow accessing internal EC2 instances which have a public IP #40

Open hjacobs opened 8 years ago

hjacobs commented 8 years ago

Apparently you can assign a public IP to EC2 instances in the "internal" (private) subnets. Nobody should do this, but it's technically possible. This will allow sending data to private EC2 instances (e.g. via UDP), but the route back will not work (due to NAT).

We should configure ACLs appropriately to avoid this.