[pve-devel] [PATCH] qemu-server: add support for unsecure migration (setting in datacenter.cfg)

[Stefan Priebe - Profihost AG]

Am 28.12.2012 um 08:38 schrieb Dietmar Maurer <dietmar at proxmox.com>:

>> But how? I mean this is a feature for TRUSTED networks! So private
>> separated LAN for cluster interconnect. If you have that how should this
>> happen?
> 
> Security matters is something unusual happens, some kind of attack. So your
> TRUSTED network turn into a not fully TRUSTED network.

But then you trusted host servers might be effected as well.

I don't see a special risk here. Network security can't be handled by ssh. A much lower level is needed ip/ mac filter per port on switch.

Stefan

> 
> 
> 
> 
>