[ovs-dev] ovn: Improving southbound database security

[Lance Richardson]

> From: "Ben Pfaff" <blp at ovn.org>
> To: "Andy Zhou" <azhou at ovn.org>
> Cc: "ovs dev" <dev at openvswitch.org>, "Numan Siddique" <nusiddiq at redhat.com>, "Babu Shanmugam" <bschanmu at redhat.com>,
> "Lance Richardson" <lrichard at redhat.com>, "Justin Pettit" <jpettit at ovn.org>, "Russell Bryant" <russell at ovn.org>
> Sent: Thursday, October 13, 2016 2:26:13 PM
> Subject: Re: ovn: Improving southbound database security
> 
> On Wed, Oct 12, 2016 at 01:51:39PM -0400, Russell Bryant wrote:
> > 1) Add support to ovsdb-server for read-only remotes.  The port reachable
> > by ovn-controller would only accept read-only connections.
> 
> Andy, is this something that you can put on your to-do list?  I guess
> that it is not a huge amount of work.
> 
> Thanks,
> 
> Ben.
> 

Hi Ben,

I have an initial prototype for this, I can post later today as an
RFC.

   Lance