Should website container be able to access local ips ??

gmakhs

Website can access local ips like 192.168.0.1 and i wonder if thats normal, they can actually access the service on that local ip

xyzulu

If the OS can access a network, then the webserver should also be able to.. or am I missing something? What if my server has a number of IP's/routes.. surely I'd want resources (websites) to be able to use/access these?

gmakhs

xyzulu its not a complaint, i am curious if the website are restricted to one interface or on public address only trying to understand how veth (network interface of websites) suppose to work

xyzulu

gmakhs Test it.. you'll see the results. When you say website.. that is a little confusing in this context.. do you mean the webserver is listening on all interfaces? Isn't this to be expected? I know IPv4 and IPv6 both work just fine to access the webserver.

JohnB

xyzulu He means that if he has some PHP code on a site it can make a request to 192.168.0.1 so if you had a very poorly setup network someone could create a reverse proxy into a switch or something I guess lol.

Attacker <> Attacker's enhance container <> Internal endpoint

Network security isn't really Enhance's job