Chapter 12. Messaging security in OpenStack Security Guide -> Message queue process isolation and policy - current - more details need for namespaces and zeromq
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openstack-manuals |
Expired
|
Wishlist
|
Unassigned |
Bug Description
More details are needed describing or illustrating the process isolation described in this section. There are suggestions of using network namespaces for process isolation but no real details on how to do so. Especially with zeromq. This looks complicated enough that at least a diagram illustrating setup of zeromq using network and ipc namespaces would be helpful.
-------
Built: 2014-07-15T19:04:56 00:00
git SHA: f7711cc343e5042
URL: http://
source File: file:/home/
xml:id: messaging-security
Changed in openstack-manuals: | |
status: | New → Confirmed |
importance: | Undecided → Wishlist |
Idea here should be to provide a high level diagram, but not get too deep into the discussion of network namespaces, which is probably best left to other guides. We do think that a diagram would be useful here.