Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-95060

Avoid NBFT connections outside of a HFI subnet

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • No
    • None
    • rhel-ps-drivers
    • ssg_platform_storage
    • 4
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • All
    • None

      In the context of a particular HFI, avoid making connections outside of a particular subnet. Such connections will likely fail anyway, delaying boot and spitting error messages and creating unnecessary confusion when reading the logs.

      Typically caused by discovery log page entries that provide transport address from a different subnet than the discovery controller traddr. Such entries are often marked as unavailable in the NBFT table, yet are attempted to be connected anyway.

      Filtering should take place on SSNS entries and also on (re-)discovery from any discovery descriptors.

      For static addresses the connection should be skipped when gateway is not configured.

      For DHCP interfaces an actual network interface state should be checked as the DHCP-acquired data may differ from the pre-OS phase.

              tbzatek Tomáš Bžatek
              tbzatek Tomáš Bžatek
              Tomáš Bžatek Tomáš Bžatek
              Marco Patalano Marco Patalano
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: