"Waines, Greg" <greg.wai...@windriver.com> writes:

>   * MasterAgent and SubAgent communicate over TCP/IP between containers or
>     between container and host

So the one issue there is that AgentX over TCP is potentially insecure.
Between containers, in an isolated environment, it's fine.  Between the
container and the host you are leaking a TCP port that may be used
maliciously.  AgentX was designed to run over a secured socket, so the
right thing to do is attach a secured socket instead through the
container file passing mechanism; I assume this is possible but haven't
tried it.

-- 
Wes Hardaker
USC/ISI


_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to