Bind the HTTP listener to localhost when fastdp enabled

Prevent containers from accessing the weave router control port when
fast datapath is in use.
This commit is contained in:
Adam Harrison committed 2015-11-04 17:42:24 +00:00
1 parent 781c805e10
commit 67c2d53e59
1 file changed
+1 -1
+1 -1
View File
@@ -1481,7 +1481,7 @@ launch_router() {
$(router_opts_$BRIDGE_TYPE) \
--ipalloc-range "$IPRANGE" \
--dns-effective-listen-address $DOCKER_BRIDGE_IP \
${NETHOST_OPT:+$DNS_ROUTER_OPTS} $NO_DNS_OPT \
${NETHOST_OPT:+$DNS_ROUTER_OPTS --http-addr 127.0.0.1:$HTTP_PORT} $NO_DNS_OPT \
--docker-api "unix:///var/run/docker.sock" "$@")
with_container_netns_or_die $CONTAINER_NAME setup_router_iface_$BRIDGE_TYPE
attach_router