Salt: Like Puppet, Except It Doesn’t Suck

Re:Salt: Like Puppet, Except It Doesn’t Suck by ipmb on Monday June 24, 2013 @11:51AM (#5933682)

If it's a concern, just lock it up behind iptables. Only let your master talk to your minions and your minions can only talk to your master.

[ Parent | on HN ]

Re:Salt: Like Puppet, Except It Doesn’t Suck by tptacek on Monday June 24, 2013 @12:06PM (#5933789)

I'm not telling you it's malpractice to use it that way, but we wouldn't.

[ Parent | on HN ]

Re:Salt: Like Puppet, Except It Doesn’t Suck by ipmb on Monday June 24, 2013 @12:21PM (#5933907)

Why?

[ Parent | on HN ]

Re:Salt: Like Puppet, Except It Doesn’t Suck by JoachimSchipper on Monday June 24, 2013 @01:43PM (#5934465)

I'm not tptacek, but note that IP addresses are not exactly cryptographically secured. If you only restrict access by IP address, you tend to lose your whole intranet as soon as one host falls.

(Then again, that's how it usually goes anyway.)

[ Parent | on HN ]