GutoVeronezi commented on issue #8221:
URL: https://github.com/apache/cloudstack/issues/8221#issuecomment-1808003769

   @IgaoWolf, in addition to 
https://github.com/apache/cloudstack/issues/8221#issuecomment-1807118065, bear 
in mind that ACS considers the first entry of header `X-Forwarded-For` as the 
request source IP. Users are able to modify this header; therefore, if the 
firewall doing the NAT to your floating IP is not handling it properly, users 
will bypass some configurations, like `api.allowed.source.cidr.list`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to