Wido den Hollander 9988c269b2 CLOUDSTACK-7958: Add configuration for limit to CIDRs for Admin API calls (#2046) ...

* Cleanup and Improve NetUtils

This class had many unused methods, inconsistent names and redundant code.

This commit cleans up code, renames a few methods and constants.

The global/account setting 'api.allowed.source.cidr.list' is set
to 0.0.0.0/0,::/0 by default preserve the current behavior and thus
allow API calls for accounts from all IPv4 and IPv6 subnets.

Users can set it to a comma-separated list of IPv4/IPv6 subnets to
restrict API calls for Admin accounts to certain parts of their network(s).

This is to improve Security. Should an attacker steal the Access/Secret key
of an account he/she still needs to be in a subnet from where accounts are
allowed to perform API calls.

This is a good security measure for APIs which are connected to the public internet.

Signed-off-by: Wido den Hollander <wido@widodh.nl>

2018-01-04 10:56:30 +05:30

..

bindir

fixing utils license header

2012-06-06 23:06:02 -04:00

conf

CLOUDSTACK-10012: Migrate to Embedded Jetty

2017-11-03 23:57:25 +05:30

src

CLOUDSTACK-7958: Add configuration for limit to CIDRs for Admin API calls (#2046)

2018-01-04 10:56:30 +05:30

pom.xml

CLOUDSTACK-10196: Remove ejb-api 3.0 dependency (#2348)

2017-12-18 23:59:06 +05:30