Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DoS warning about binding to 0.0.0.0 is superfluous and confusing in containerized environments #7488

Closed
atoulme opened this issue Apr 4, 2023 · 3 comments
Labels
bug Something isn't working

Comments

@atoulme
Copy link
Contributor

atoulme commented Apr 4, 2023

Describe the bug
The warning displayed when binding the collector ports to 0.0.0.0 is superfluous and confusing when operating in Docker environments. I would like this warning to be removed.

See https://github.com/open-telemetry/opentelemetry-collector/blob/main/docs/security-best-practices.md#safeguards-against-denial-of-service-attacks

See signalfx/splunk-otel-collector-chart#673 (reply in thread) for original discussion.
Steps to reproduce
When the collector binds ports to 0.0.0.0, it displays warnings that inform the user that 0.0.0.0 is open to any network interface and may be a problem for DoS attacks. This is confusing as we must use this network interface for containerized environments, and this creates security alerts.

What did you expect to see?
I do not expect to see a particular warning.

What did you see instead?
Using the 0.0.0.0 address exposes this server to every network interface, which may facilitate Denial of Service attacks {"kind": "receiver", "name": "otlp", "pipeline": "logs", "documentation": "https://github.com/open-telemetry/opentelemetry-collector/blob/main/docs/security-best-practices.md#safeguards-against-denial-of-service-attacks"}

@atoulme atoulme added the bug Something isn't working label Apr 4, 2023
@codeboten
Copy link
Contributor

There was another issue mentioning this warning from the opentelemetry helm chart that was addressed by @TylerHelmuth. Would a similar solution work in your case?

@atoulme
Copy link
Contributor Author

atoulme commented Apr 5, 2023

Thanks, we will consider applying a similar solution.

@atoulme
Copy link
Contributor Author

atoulme commented Apr 13, 2023

Closing as Won't Fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants