News for hackers. Stuff that matters.

A comment on UFO VPN claims zero-logs policy, leaks 20M user logs. Parent comment

Re:UFO VPN claims zero-logs policy, leaks 20M user logs by ashtonkem on Friday July 17, 2020 @09:48PM (#23878236)
Azure can even configure mutual authentication between the LB & the underlying servers, which would cause any direct server access to result in a 401[0].

0 - For API servers. I'm not sure if you could configure this with services like Elasticsearch.

[ Parent | on HN ]
Re:UFO VPN claims zero-logs policy, leaks 20M user logs by kevinkeller on Saturday July 18, 2020 @01:30AM (#23879244)
>Azure can even configure mutual authentication between the LB & the underlying servers

You can achieve a similar effect in AWS, by declaring only the LB's security group as the source in servers' security group ingress rule.

Any requests sent directly to the servers simply wouldn't connect.

[ Parent | on HN ]
Re:UFO VPN claims zero-logs policy, leaks 20M user logs by ashtonkem on Saturday July 18, 2020 @02:49AM (#23879577)
That’s also a thing on Azure, but you can actually deploy certificates for mutual authentication as well. That way if somehow the network layer is pierced, you have another layer of protection.
[ Parent | on HN ]